CVE-2025-67718
1 advisory.
npm/formio CVE-2025-67718: high, EPSS 0.31%
Formio improperly authorized permission elevation through specially crafted request path
Action: Upgrade formio to 3.5.7 or later.
npm i formio@3.5.7npm i formio@4.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.7 | - |
| 4.0.0-rc.1 | 4.4.3 | - |
Fixed versions
| 3.5.7 | 4.4.3 |
Sources
- osv: GHSA-m654-769v-qjv7
- https://github.com/formio/formio/security/advisories/GHSA-m654-769v-qjv7
- https://nvd.nist.gov/vuln/detail/CVE-2025-67718
- https://github.com/formio/formio/commit/1665b7c99e3cf3246db7ff0b4ff732231dc6903b
- https://github.com/formio/formio/commit/1836bdd9f55f5888ff397c257b2108c09d3de478
- https://github.com/formio/formio
CVE-2025-67718 · published · modified · JSON