Formio vulnerabilities
We track 1 vulnerability in Formio products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 11, 2025.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Formio vulnerabilities
- 8.7 High severity
formio: Improper Handling of Case Sensitivity
Form.io is a combined Form and API platform for Serverless applications. Versions 3.5.6 and below and 4.0.0-rc.1 through 4.4.2 contain a flaw in path handling which could allow an attacker to access protected API endpoints by sending a crafted request path. An