tduck-survey-form vulnerabilities
CVEs whose affected-version data names the tduck-survey-form package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-92602High· 7.1PoCTDuck survey form through version 5.3 fails to validate webhook URLs or verify form ownership in the WebhookConfigController
TDuck survey form through version 5.3 fails to validate webhook URLs or verify form ownership in the WebhookConfigController. Authenticated attackers can attach webhooks to other users' forms and exfiltrate submissions to arbitrary exter…
▾ MidnightTDuckCloud · tduck-survey-formEPSS 0.30%via NVD
CVE-2026-92567Medium· 6.5TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data
TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /user/form/data/update endpoint that allows authenticated users to overwrite other users' form submission data. Attackers can discover submi…
▾ SunlitTDuckCloud · tduck-survey-formEPSS 0.34%via NVD