{"action":"Upgrade forms to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"}],"component":"forms","cve_ids":["CVE-2021-23388"],"ecosystem":"npm","epss":0.0165,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-c56f-grv3-gpfr","id":"tcs_01M5KFHTSDKZ2SDDC9N6W88Z2Z","modified_at":"2026-07-08T06:49:29.628079044Z","published_at":"2021-06-07T22:10:13Z","references":["https://osv.dev/vulnerability/GHSA-c56f-grv3-gpfr","https://nvd.nist.gov/vuln/detail/CVE-2021-23388","https://github.com/caolan/forms/pull/214","https://github.com/caolan/forms/pull/214/commits/d4bd5b5febfe49c1f585f162e04ec810f8dc47a0","https://snyk.io/vuln/SNYK-JS-FORMS-1296389"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-c56f-grv3-gpfr","url":"https://osv.dev/vulnerability/GHSA-c56f-grv3-gpfr"}],"summary":"Regular expression denial of service in forms"}