Vulnerabilities

TI-2026-44168 CVE-2026-61696

Forem: Stored XSS in Admin Abuse Report Rendering

LOW 28

Forem is open source software for building communities.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00322 Published 2026-08-18 Fixed in 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c CWE-116

TI-2026-36050 CVE-2026-48780

Forem vulnerable to bypass of email address domain restrictions

MEDIUM 41

Forem is open source software for building communities.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00218 Published 2026-06-16 No fix listed CWE-287

TI-2023-11949 CVE-2023-27160 · GHSA-v5g3-mw88-c3jm

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF)…

HIGH 67

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01157 Published 2023-03-31 No fix listed CWE-918

Vulnerabilities

Filters

Forem: Stored XSS in Admin Abuse Report Rendering

Forem vulnerable to bypass of email address domain restrictions

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF)…