fabric
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting fabricpage 1 of 1
- CVE-2026-27013MEDIUMCVSS 6.1EG 6.1✓ Fixed in 7.2.02026-02-19
Fabric.js is a Javascript HTML5 canvas library. Prior to version 7.2.0, Fabric.js applies `escapeXml()` to text content during SVG export (`src/shapes/Text/TextSVGExportMixin.ts:186`) but fails to apply it to other user-controlled string v…
- CVE-2026-44311MEDIUMCVSS 6.1EG 6.1✓ Fixed in 7.4.02026-06-12
Fabric.js is a Javascript HTML5 canvas library. Prior to 7.4.0, a potential Cross-Site Scripting (XSS) vulnerability exists in Fabric.js due to improper escaping of user-controlled input during SVG serialization via the toSVG() method. Spe…
Check whether fabric is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for fabric CVEs against the assets you own.
Start Free Scan →