TD
Product
tduck-survey-form
10
CVEs
0
On KEV
7.1
Max CVSS
4
New 30D
Severity mix
Critical 0High 2Medium 8Low 0
Watch
Add tduck-survey-form to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92567 | 6.5 | Sep 16 | TDuck survey form through 5.0 Unauthorized Data Modification Affected: through 5.0 |
| CVE-2026-100303 | 5.4 | Sep 25 | TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints Affected: through 6.0 |
| CVE-2026-100306 | 5.3 | Sep 25 | TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement Affected: through 6.0 |
| CVE-2026-100304 | 5.3 | Sep 25 | TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check Affected: 6.0 |
| CVE-2026-111621 | 4.3 | Oct 16 | TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key} Affected: through 5.3 |
| CVE-2026-109167 | 4.3 | Oct 12 | TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/save Affected: through 6.0 |
| CVE-2026-109165 | 4.3 | Oct 12 | TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create Affected: through 6.0 |
| CVE-2026-100305 | 4.3 | Sep 25 | TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint Affected: through 6.0 |
Showing 8