Formie
Verbb · 9 CVEs
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
Sep 23, 2026
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
Sep 23, 2026
Formie: Missing authorization on sent notification resend modal exposes submission PII
Sep 23, 2026
Formie: Server-Side Template Injection in Formie Hidden field defaults
Aug 19, 2026
Formie: Unauthenticated front-end submission editing can overwrite existing submissions
May 29, 2026
Formie: Pre-authenticated server-side template injection in Hidden fields
May 29, 2026
Formie has a XSS vulnerability for email notification content for preview
Apr 11, 2025
Formie has a XSS vulnerability for importing forms
Apr 11, 2025
verbb/formie Server-Side Template Injection for variable-enabled settings
May 20, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-76087 | Formie: Unauthenticated users can overwrite incomplete submissions via submit action | HIGH | 0.31% | Sep 23, 2026 |
| CVE-2026-76086 | Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials | HIGH | 0.29% | Sep 23, 2026 |
| CVE-2026-76089 | Formie: Missing authorization on sent notification resend modal exposes submission PII | HIGH | 0.24% | Sep 23, 2026 |
| CVE-2026-52889 | Formie: Server-Side Template Injection in Formie Hidden field defaults | CRITICAL | 1.27% | Aug 19, 2026 |
| CVE-2026-47266 | Formie: Unauthenticated front-end submission editing can overwrite existing submissions | HIGH | 0.50% | May 29, 2026 |
| CVE-2026-45697 | Formie: Pre-authenticated server-side template injection in Hidden fields | CRITICAL | 0.81% | May 29, 2026 |
| CVE-2025-32426 | Formie has a XSS vulnerability for email notification content for preview | MEDIUM | 0.23% | Apr 11, 2025 |
| CVE-2025-32427 | Formie has a XSS vulnerability for importing forms | MEDIUM | 0.23% | Apr 11, 2025 |
| CVE-2024-35191 | verbb/formie Server-Side Template Injection for variable-enabled settings | MEDIUM | 0.25% | May 20, 2024 |
Showing 1 to 9 of 9 CVEs