Skip to content
OpenAdvisories

Package · Packagist

getformwork/formwork

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-27198

    Formwork Improperly Manages Privileges During User Creation

    Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does n…

    getformwork Formwork getformwork/formwork Packagist
  • High 8.2
    GHSA-c85w-x26q-ch87

    Formwork improperly validates input of User role preventing site and panel availability

    ### Summary Improper validation of select fields allows attackers to craft an input that crashes the system, resulting in a 500 status and making the entire site and administration panel unavailable. This clearly impacts the Availability aspect of the CIA tri…

    getformwork/formwork Packagist