CVE-2021-23388: Forms Project Forms

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

The package forms before 1.2.1, from 1.3.0 and before 1.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via email validation.

Affected products

• Forms Project Forms: before 1.2.1 (fixed in 1.2.1); from 1.3.0, before 1.3.2 (fixed in 1.3.2)

Published 2021-06-01. Last modified 2026-06-17.