CRITICAL9.8npm
GHSA-52vj-mr2j-f8jh· CVE-2020-28246Server-Side Template Injection in formio
Modified: 5/3/2024
package
npm/formio
pkg:npm/formio
HIGHnpm
GHSA-m654-769v-qjv7· CVE-2025-67718Formio improperly authorized permission elevation through specially crafted request path
Modified: 12/11/2025