{"api_version":"v1","generated_at":"2026-10-06T01:10:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-getformwork-formwork-c4cb3d5a0c4d","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/formwork","name":"Formwork","next_cursor":null,"observations":[{"affected":"formwork: < 2.3.13","affected_versions_present":true,"cve_id":"CVE-2026-104478","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104478","fixed":"formwork: 2.3.13","last_modified":"2026-10-02T23:28:48.001Z","patch_url":"https://github.com/getformwork/formwork/commit/89e7821a6fcee89474cd401b3dde0c1dccb0687f","primary_source":"","published":"2026-10-02T23:28:48.001Z"},{"affected":"Formwork: 2.0.0 \u2264 2.3.10","affected_versions_present":true,"cve_id":"CVE-2026-82451","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-82451","fixed":"Formwork: 2.3.11","last_modified":"2026-09-24T14:20:26.937Z","patch_url":"https://github.com/getformwork/formwork/security/advisories/GHSA-hpgc-57cm-66pc","primary_source":"","published":"2026-08-29T13:47:54.007Z"},{"affected":">= 2.0.0, < 2.3.4","affected_versions_present":true,"cve_id":"CVE-2026-27198","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27198","fixed":"2.3.4.","last_modified":"2026-02-24T19:01:22.284Z","patch_url":"https://github.com/getformwork/formwork/security/advisories/GHSA-34p4-7w83-35g2","primary_source":"","published":"2026-02-21T05:11:42.535Z"},{"affected":"< 2.2.0","affected_versions_present":true,"cve_id":"CVE-2025-65956","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-65956","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-11-26T16:11:03.718Z","patch_url":"https://github.com/getformwork/formwork/pull/791","primary_source":"","published":"2025-11-25T23:20:23.965Z"},{"affected":"< 1.13.1; = 2.0.0-beta.1","affected_versions_present":true,"cve_id":"CVE-2024-37160","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-37160","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T03:50:55.370Z","patch_url":"https://github.com/getformwork/formwork/commit/9d471204f7ebb51c3c27131581c2b834315b5e0b","primary_source":"","published":"2024-06-07T14:09:55.132Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"getformwork"}}