Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/forms@1.3.0
purl pkg:npm/forms@1.3.0
Next non-vulnerable version 1.3.2
Latest non-vulnerable version 1.3.2
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-dnxp-jqjq-g7b8
Aliases:
CVE-2021-23388
GHSA-c56f-grv3-gpfr
1.3.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-1scz-cjfg-cqbw XSS Vulnerability Forms did not have proper html escaping. This means that if the application did not sanitize html on behalf of forms, use of forms may be vulnerable to cross site scripting GMS-2017-125
VCID-gkjn-1nbc-jydj Cross-Site Scripting in forms CVE-2017-16015
GHSA-vwjj-2852-3765

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T17:42:02.919617+00:00 GitLab Importer Affected by VCID-dnxp-jqjq-g7b8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/forms/CVE-2021-23388.yml 38.6.0
2026-06-12T15:40:34.350446+00:00 GitLab Importer Fixing VCID-gkjn-1nbc-jydj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/forms/CVE-2017-16015.yml 38.6.0
2026-06-12T15:39:42.049546+00:00 GitLab Importer Fixing VCID-1scz-cjfg-cqbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/forms/GMS-2017-125.yml 38.6.0
2026-06-12T08:10:06.594213+00:00 GithubOSV Importer Fixing VCID-gkjn-1nbc-jydj https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/11/GHSA-vwjj-2852-3765/GHSA-vwjj-2852-3765.json 38.6.0
2026-06-11T20:24:48.984159+00:00 GHSA Importer Fixing VCID-gkjn-1nbc-jydj https://github.com/advisories/GHSA-vwjj-2852-3765 38.6.0