{"action":"Upgrade Umbraco.Forms to 16.4.1 (16.x) or 17.1.1 (17.x) or later.","affected":[{"fixed":"16.4.1","introduced":"16.0.0"},{"fixed":"17.1.1","introduced":"17.0.0"}],"component":"Umbraco.Forms","cve_ids":["CVE-2026-24687"],"ecosystem":"NuGet","epss":0.00463,"exploited":false,"fixed_versions":["16.4.1","17.1.1"],"ghsa_id":"GHSA-hm5p-82g6-m3xh","id":"tcs_01M5N8R90C2TKY2ZYNPW4SCBA1","modified_at":"2026-02-03T03:12:28.668803Z","published_at":"2026-01-30T14:43:18Z","references":["https://osv.dev/vulnerability/GHSA-hm5p-82g6-m3xh","https://github.com/umbraco/Umbraco.Forms.Issues/security/advisories/GHSA-hm5p-82g6-m3xh","https://nvd.nist.gov/vuln/detail/CVE-2026-24687","https://github.com/umbraco/Umbraco.Forms.Issues"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hm5p-82g6-m3xh","url":"https://osv.dev/vulnerability/GHSA-hm5p-82g6-m3xh"}],"summary":"Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac"}