CVE-2026-27198
1 advisory.
Packagist/getformwork/formwork CVE-2026-27198: high 8.8
Formwork Improperly Managed Privileges in User creation
Action: Upgrade getformwork/formwork to 2.3.4 or later.
composer require getformwork/formwork:2.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.3.4 | - |
Fixed versions
| 2.3.4 |
Sources
- osv: GHSA-34p4-7w83-35g2
- https://github.com/getformwork/formwork/security/advisories/GHSA-34p4-7w83-35g2
- https://nvd.nist.gov/vuln/detail/CVE-2026-27198
- https://github.com/getformwork/formwork/commit/19390a0b408e084bdef86f3581e050f3ee51e7cd
- https://github.com/getformwork/formwork
- https://github.com/getformwork/formwork/releases/tag/2.3.4
CVE-2026-27198 · published · modified · JSON