VULNRABLE / Vulnerability / CVE-2026-114125

CVE-2026-114125

CRITICAL WATCH storybook GHSA

Exploit verdict: CVSS 9.5 · no EPSS data

CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA

Summary

Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

What this means

CVE-2026-114125 is a critical-severity vulnerability affecting storybook, rated CVSS 9.5. Published October 21, 2026.

View full advisory at GHSA →