What’s Vulnerable › Products
@apostrophecms form vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your @apostrophecms form version is affected
Latest @apostrophecms form vulnerabilities
- CVE-2026-113667 — ApostropheCMS: CAPTCHA response token not URL-encoded (CVSS 5.3)
- CVE-2026-113656 — ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS (CVSS 5.3)