CVE-2026-105950Published
getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-105950 · Microsoft / collected KEV context
cve-program · CVE-2026-105950
- https://vuldb.com/vuln/413925
- https://vuldb.com/vuln/413925/cti
- https://vuldb.com/cve/CVE-2026-105950
- https://vuldb.com/submit/992820
- https://github.com/getformwork/formwork/security/advisories/GHSA-p78q-v3pr-p87j
- https://github.com/getformwork/formwork/pull/940
- https://github.com/getformwork/formwork/commit/729701e59c5886685c5a1d477bdc3035e41f18b1
- https://github.com/getformwork/formwork/releases/tag/2.3.13
- https://github.com/getformwork/formwork/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.