silverstripe/userforms
UserForms enables CMS users to create dynamic forms via a drag and drop interface and without getting involved in any PHP code
78%
Total Score
88
100
94
67
Health Score Breakdown
Only one contributor made commits in the last three months, with 100% of commits from that contributor; organizational backing partly offsets the concentration but does not remove succession risk.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, making vulnerability-reporting expectations less clear for a CMS module.
All eight workflows were analyzed with no audit findings and six use read-only permissions, but all seven action references are unpinned, weakening build reproducibility and update control.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-54721 silverstripe/userforms is vulnerable to Improper Input Validation in versions 0.0.0 - 6.4.9, 7.0.0 - 7.0.7 and 7.1.0 - 7.1.1. | 0.0.0 - 6.4.97.0.0 - 7.0.77.1.0 - 7.1.1 | High |
Package versions
Maintainers
 Will Rossiter |
| Damian Mooyman |
| David Craig |
| Scott Hutchinson |
| Christopher Pitt |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 silverstripe/cms Version ^6 | — | — |
silverstripe/framework Version ^6.1 | — | — |
silverstripe/versioned Version ^3 | — | — |
silverstripe/mimevalidator Version ^4 | — | — |
silverstripe/segment-field Version ^4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.