- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 20 · 1 critical, 1 high, 14 medium, 4 low
- Registry
- Packagist
Advisories 20
- CVE-2026-96360Low 3.5
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96361Medium 4.6
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96358Medium 4.6
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96359Medium 4.6
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96362Medium 4.2
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96363Low 3.1
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96367Medium 4.6
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96368Medium 4.6
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96370Medium 5.4
Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96369Low 3.1
Webform - Less critical - Access bypass - SA-CONTRIB-2026-165
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96371Medium 5.4
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96372Medium 5.4
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96373Low 3.3
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96366Medium 5.3
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96365High 7.5
Webform - Less critical - Denial of service - SA-CONTRIB-2026-170
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
Show all 20 advisoriesShow fewer advisories
- CVE-2026-96364Medium 5.3
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96357Medium 4.6
Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96398Medium 4.3
Webform - Less critical - Access bypass - SA-CONTRIB-2026-173
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96356Medium 5.3
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.
- CVE-2026-96355Critical 9.1
Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175
Affected: fixed in 6.2.12; from 6.3.0, fixed in 6.3.1.