{"action":"Upgrade verbb/formie to 2.1.44 or later.","affected":[{"fixed":"2.1.44","introduced":"0"}],"component":"verbb/formie","cve_ids":["CVE-2025-32426"],"ecosystem":"Packagist","epss":0.00232,"exploited":false,"fixed_versions":["2.1.44"],"ghsa_id":"GHSA-2xm2-23ff-p8ww","id":"tcs_01M5KESD1BK1A0JYDPNG4VJ6DX","modified_at":"2025-04-11T20:14:21.352179Z","published_at":"2025-04-11T19:59:04Z","references":["https://osv.dev/vulnerability/GHSA-2xm2-23ff-p8ww","https://github.com/verbb/formie/security/advisories/GHSA-2xm2-23ff-p8ww","https://nvd.nist.gov/vuln/detail/CVE-2025-32426","https://github.com/verbb/formie"],"severity":{"label":"medium","score":4.6},"sources":[{"source":"osv","source_id":"GHSA-2xm2-23ff-p8ww","url":"https://osv.dev/vulnerability/GHSA-2xm2-23ff-p8ww"}],"summary":"Formie has XSS vulnerability for email notification content for preview"}