Known Vulnerabilities for N5 Upload Form by N5 Upload Form Project
Listed below are 1 of the newest known vulnerabilities associated with "N5 Upload Form" by "N5 Upload Form Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63429 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no globa... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-55446 json | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.0.19, an attacker can send a /api/v... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-49055 json | Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions. | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-48500 json | Filament is a collection of full-stack components for accelerated Laravel development. From 3.0.0 until 3.3.52, 4.11.5, and 5... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-47346 json | Backend users with file write permissions were able to upload form definition files with mixed-case extensions (e.g., .FORM.Y... | Not Provided | 2026-06-09 | 2026-06-11 |
| CVE-2026-45797 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the `/api/upload` endpoint allows unauthenticated file u... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-44974 json | @hapi/content provided HTTP Content-* headers parsing. Prior to 6.0.2, Content.disposition() retained the last occurrence of ... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-42845 json | The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0 , there is an unauthenticated page-content ... | Not Provided | 2026-05-11 | 2026-05-12 |
| CVE-2026-40769 json | Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – Save Entries, File Upload & Country Cod... | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-39970 json | TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.typebot.i... | Not Provided | 2026-05-22 | 2026-05-22 |