GHSA-7jxj-rpx7-ph2c
Low · 3.1CVSS
3.1
EPSS
—
Published
Jan 22, 2026
CISA due date
—
The record
Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| NuGet | Umbraco.Forms | 0 | 13.9.0 |
| NuGet | Umbraco.Forms | 14.0.0-beta001 | 16.4.0 |
| NuGet | Umbraco.Forms | 17.0.0-rc1 | 17.1.0 |
| nuget | Umbraco.Forms | 14.0.0-beta001 | 16.4.0 |
| nuget | Umbraco.Forms | 17.0.0-rc1 | 17.1.0 |
Related vulnerabilities
- CVE-2026-24687 Umbraco Forms is a form builder that integrates with the Umbraco content management… Also affects Umbraco.Forms
- CVE-2026-105711 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before… CWE-524
- CVE-2026-105752 vLLM is an inference and serving engine for large language models. CWE-524
- CVE-2026-94543 Next.js is a React framework for building full-stack web applications. CWE-524
- CVE-2026-94484 Next.js is a React framework for building full-stack web applications. CWE-524
- CVE-2026-93748 http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache… CWE-524
- CVE-2026-88059 Angular is a development platform for building mobile and desktop web applications using… CWE-524
- CVE-2026-82755 Use of Cache Containing Sensitive Information vulnerability in ash-project… CWE-524