GHSA-58q2-9x27-h2jm
NoneCVSS
—
EPSS
—
Published
Jan 15, 2026
CISA due date
—
The record
solspace/craft-freeform Has a DoS Vulnerability
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | solspace/craft-freeform | 0 | 4.1.30 |
| packagist | solspace/craft-freeform | 4.1.29 | No fix |
| packagist | solspace/craft-freeform | 4.1.29 | 4.1.30 |
Related vulnerabilities
- CVE-2026-26188 Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. Also affects solspace/craft-freeform
- GHSA-jp3q-wwp3-pwv9 Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS)… Also affects solspace/craft-freeform
- GHSA-rwr8-xrpw-9qf5 solspace/craft-freeform Exposed to Known Axios Vulnerabilities via Precompiled Assets Also affects solspace/craft-freeform
- GHSA-44jg-mv3h-wj6g solspace/craft-freeform Vulnerable to XSS in `PhpSpreadsheet` HTML Writer Due to… Also affects solspace/craft-freeform
- CVE-2026-114731 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled… CWE-770
- CVE-2026-96377 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined… CWE-770
- CVE-2026-96365 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform… CWE-770
- CVE-2026-114723 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource… CWE-770