blueways/bw-captcha vulnerabilities

CVEs whose affected-version data names the blueways/bw-captcha package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112067Medium· 6.9

today

Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)

The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image can read the answer from it and submit it, so automated clients can pass the challenge. This appli…

▾ SunlitTYPO3 · blueways/bw-captchavia CVEORG