Skip to content
OpenAdvisories

Vendor

forem

2 known vulnerabilities.

Products

forem 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-48780

    Forem vulnerable to bypass of email address domain restrictions

    Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The issue is pat…

    forem forem