OpnForm vulnerabilities

CVEs whose affected-version data names the OpnForm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-75106Critical· 9.1PoC

1mo ago

OpnForm Editable Submission Secret Derivation via Empty Hashids Salt

OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full sub…

▾ AbyssalOpnForm · OpnFormEPSS 0.30%via CVEORG