Skip to content

drupal/webform (Packagist)

Advisories
31
Latest version
—
License
—
OpenSSF Scorecard
—

How to fix

Upgrading to 6.3.1 or later clears every advisory below that has a fix.

Upgrade commands
composer
composer require drupal/webform:^6.3.1

Known vulnerabilities

AdvisorySeverityAffectedFixed in
DRUPAL-CONTRIB-2026-175
The Webform module allows site builders to create forms, collect submissions, and render submitted values in configurable formats.
Critical
EPSS 0.42%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-174
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.41%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-173
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.32%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-172
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.22%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-171
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.29%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-170
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
High
EPSS 0.41%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-169
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.40%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-168
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Low
EPSS 0.23%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-167
The Webform module enables site builders to create forms and collect submissions.
Medium
EPSS 0.24%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-166
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.24%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-165
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Low
EPSS 0.21%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-164
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.24%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-163
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.17%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-162
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.26%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-161
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Low
EPSS 0.24%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-160
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.20%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-159
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.22%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-158
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.22%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-155
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Medium
EPSS 0.22%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2026-154
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data.
Low
EPSS 0.23%
< 6.2.12
>= 6.3.0, < 6.3.1
6.2.12
6.3.1
DRUPAL-CONTRIB-2021-045
### Access Bypass: This module enables you to build forms and surveys in Drupal.
Not rated yet
>= 6.0.0, < 6.0.6
>= 6.1.0, < 6.1.2
6.0.6
6.1.2
DRUPAL-CONTRIB-2021-026
The Webform module uses the [CKEditor](https://github.com/ckeditor/ckeditor4), library for WYSIWYG editing.
Not rated yet
< 5.28.0
>= 6.0.0, < 6.0.5
5.28.0
6.0.5
DRUPAL-CONTRIB-2021-004
The [Webform module for Drupal 8/9](https://www.drupal.org/project/webform) includes a default Contact webform, which sends a notification email to the site…
Not rated yet
< 5.25.0
>= 6.0.0, <= 6.0.0
>= 6.0.1, <= 6.0.1
5.25.0
DRUPAL-CONTRIB-2020-018
This webform module enables you to build a 'Term checkboxes' element.
Not rated yet
< 5.12.0
5.12.0
DRUPAL-CONTRIB-2020-017
This module enables you to build forms and surveys in Drupal.
Not rated yet
< 5.11.0
5.11.0
DRUPAL-CONTRIB-2020-016
This webform module enables you to build 'Term select' and 'Term checkboxes' elements.
Not rated yet
< 5.11.0
5.11.0
DRUPAL-CONTRIB-2020-015
This module enables you to build forms and surveys in Drupal.
Not rated yet
< 5.11.0
5.11.0
DRUPAL-CONTRIB-2020-014
This module enables you to build forms and surveys in Drupal.
Not rated yet
< 5.11.0
5.11.0
DRUPAL-CONTRIB-2020-013
The Webform module allows site builders to create forms.
Not rated yet
< 5.11.0
5.11.0
DRUPAL-CONTRIB-2020-012
This module enables you to build forms and surveys in Drupal.
Not rated yet
< 5.11.0
5.11.0
DRUPAL-CONTRIB-2020-011
This module enables you to build forms and surveys in Drupal.
Not rated yet
< 5.11.0
5.11.0
Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor