PatchClock

PHP security digest · Packages

solspace/craft-freeform security advisories

1 advisory we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. Medium 23 Sep 2026

    Solspace Freeform: Limited Twig template injection via submitted field values

    Fixed in 5.10.14 · CVE-2026-73858

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including solspace/craft-freeform, and the version that fixes it.