Forms Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Forms Project records in CISA KEV

No Forms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Forms · all components

TI-2017-11740 CVE-2017-16015 · GHSA-vwjj-2852-3765

LOW 29

Forms is a library for easily creating HTML forms.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00835 Published 2018-06-04 Fixed in 1.3.0 CWE-80

TI-2021-06081 CVE-2021-23388 · GHSA-c56f-grv3-gpfr

LOW 27

The package forms before 1.2.1, from 1.3.0 and before 1.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via email validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0165 Published 2021-05-31 Fixed in 1.2.1, 1.3.2 CWE-400