Skip to content
OpenAdvisories

Product · Fabric.js

fabric.js

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-27013

    Fabric.js Affected by Stored XSS via SVG Export

    Fabric.js is a Javascript HTML5 canvas library. Prior to version 7.2.0, Fabric.js applies `escapeXml()` to text content during SVG export (`src/shapes/Text/TextSVGExportMixin.ts:186`) but fails to apply it to other user-controlled string values that are inter…

    Fabric.js fabric.js fabric npm