Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
next/@next/plugin-storybook may let attackers exploit flaws
published 18 days ago
Summary
The @next/plugin-storybook component used in your projects contains several security weaknesses that could be used by malicious actors to gain unauthorized access or cause other problems. Updating to version 14.2.35‑tuxcare.5 replaces the vulnerable code with a safe version. Apply the update as soon as possible to protect your applications.
What to do
- Update next @next/plugin-storybook to version 14.2.35-tuxcare.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | next | @next/plugin-storybook |
>= 14.2.35-tuxcare.0, < 14.2.35-tuxcare.5 Fix: upgrade to 14.2.35-tuxcare.5
|
Original advisory text
TuxCare security update for @next/plugin-storybook (9 CVEs)
TuxCare rebuilt @next/plugin-storybook to address 9 CVEs. Fixed in 14.2.35-tuxcare.5.
Timeline
Published17 Oct 2026
Updated18 Oct 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792272244 · OSV
Track software like this
Free during beta