Skip to content

Vendor

Fabric.js vulnerabilities

1 published CVE affecting Fabric.js, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Fabric.js alerts

Products

Latest Fabric.js CVEs

Newest publication first

  1. CVE-2026-19504 Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability

    Published
    MediumCVSS 4.0 EPSS 0.15%

    Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.js. Interaction with this library is required to exploit this vulnerability but attack vectors may va...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.