CVE-2026-27013
1 advisory.
npm/fabric CVE-2026-27013: high 7.6, EPSS 0.44%
Fabric.js Affected by Stored XSS via SVG Export
Action: Upgrade fabric to 7.2.0 or later.
npm i fabric@7.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.2.0 | - |
Fixed versions
| 7.2.0 |
Sources
- osv: GHSA-hfvx-25r5-qc3w
- https://github.com/fabricjs/fabric.js/security/advisories/GHSA-hfvx-25r5-qc3w
- https://nvd.nist.gov/vuln/detail/CVE-2026-27013
- https://github.com/fabricjs/fabric.js/commit/7e1a122defd8feefe4eb7eaf0c180d7b0aeb6fee
- https://github.com/fabricjs/fabric.js
- https://github.com/fabricjs/fabric.js/releases/tag/v720
CVE-2026-27013 · published · modified · JSON