Skip to content

TeleJSON: DOM XSS via unsanitised constructor name in `new Function()`

Low severity GitHub Reviewed Published Apr 1, 2026 in storybookjs/telejson • Updated Jun 8, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts