Forem vulnerabilities
We track 2 vulnerabilities in Forem products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2026.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Forem vulnerabilities
- 8.2 High severity
forem: Improper Authentication
Forem is open source software for building communities. Prior to commit a2ab6d4, a maliciously crafted email address could allow an attacker to bypass domain allowlist or denylist restrictions and gain access to invite-only forem deployments. The issue is patc
- 7.2 High severity
Forem: Server-Side Request Forgery
forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.