Securitysshole: password bypass in Alpine’s OpenSSH

storybook@10.6.7

Wait — 10.6.6 is the safer choice for now.

Published 42 h ago; most regressions surface within 72 h.

Why this verdict

  • Published 42 h ago; most regressions surface within 72 h.Evidence

Confidence 100% · algorithm v1 · computed 2026-11-12. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
None known (OSV)
License
MIT
Install scripts
None
Build provenance
Signed provenance
Weekly downloads
32,349

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

3 issues mention this version in storybookjs/storybook so far (14-day window still open). See them on GitHub

Check the official release notes below for behaviour changes before merging.

Release notes

Read the Storybook changelog on Changes.Watch or the package page on npm for this version’s features and fixes.

New in this release

  • Support for prerelease community frameworks has been added to the init command.“Community: Support prerelease community frameworks in init - [#37203](https://github.com/storybookjs/storybook/pull/37203), thanks @Sidnioulz!”
  • Published the composition schema that a hosted Storybook actually serves.“MCP: Publish the composition schema a hosted Storybook actually serves - [#37290](https://github.com/storybookjs/storybook/pull/37290), thanks @Sidnioulz!”

AI-extracted from the official release notes and checked against the quoted text. Read the source

Deprecations and deadlines

The maintainer has not deprecated this version on npm.

Did upgrading to 10.6.7 work for you?

Results appear once three developers have voted.

More storybook verdicts