PatchClock

PHP security digest · Packages

verbb/formie security advisories

3 advisories we have followed since September 2026, 3 of them critical or high, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. High 23 Sep 2026

    Formie: Missing authorization on sent notification resend modal exposes submission PII

    Fixed in 3.1.31, 2.2.23 · CVE-2026-76089

  2. High 23 Sep 2026

    Formie: Unauthenticated users can overwrite incomplete submissions via submit action

    Fixed in 3.1.31, 2.2.23 · CVE-2026-76087

  3. High 23 Sep 2026

    Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials

    Fixed in 3.1.31, 2.2.23 · CVE-2026-76086

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including verbb/formie, and the version that fixes it.