Object model for HTML5 canvas, and SVG-to-canvas parser. Backed by jsdom and node-canvas.
92%
Total Score
60
100
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-27013 fabric is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 7.2.0. | 0.0.0 - 7.2.0 | High |
AIKIDO-2025-10801 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. fabric is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.1 - 6.7.1. | 0.0.1 - 6.7.1 | Low |
AIKIDO-2025-10802 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. fabric is vulnerable to Prototype Pollution in versions 0.0.1 - 6.8.0. | 0.0.1 - 6.8.0 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant