pkg:Packagist/verbb/formie

All known vulnerabilities

• CRITICAL9.8CVE-2026-52889Formie Hidden field defaults vulnerable to Server-Side Template Injection
  from 0, < 3.1.27
• CRITICAL9.8CVE-2026-45697Formie: Pre-authenticated server-side template injection in Hidden fields
  >= 3.0.0-beta.1, < 3.1.24
• MEDIUM4.6CVE-2025-32426Formie has XSS vulnerability for email notification content for preview
  from 0, < 2.1.44
• MEDIUM4.4verbb/formie Server-Side Template Injection for variable-enabled settings
  from 0, < 2.1.6
• —formie's unauthenticated front-end submission editing can overwrite existing submissions
  >= 3.0.0, < 3.1.26
• —Formie has XSS vulnerability for importing forms
  from 0, < 2.1.44