agentprime: heyformEvery new CVE for heyform.https://agentprime.io/CVE-2026-102615: HeyForm: Uploaded HTML files are served as text/html on the app origin with no CSP — stored XSShttps://agentprime.io/advisories/CVE-2026-102615/https://agentprime.io/advisories/CVE-2026-102615/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:32:30 GMTCVECVE-2026-82291: HeyForm Reflects Any Origin in CORS Responses While Allowing Credentialshttps://agentprime.io/advisories/CVE-2026-82291/https://agentprime.io/advisories/CVE-2026-82291/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 16:19:07 GMTCVECVE-2026-63429: HeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form contexthttps://agentprime.io/advisories/CVE-2026-63429/https://agentprime.io/advisories/CVE-2026-63429/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 15:54:22 GMTCVECVE-2026-63428: HeyForm: completeSubmission persists submitter-supplied hidden fields verbatim without validating against the form's declared hidden-field sethttps://agentprime.io/advisories/CVE-2026-63428/https://agentprime.io/advisories/CVE-2026-63428/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 15:50:14 GMTCVECVE-2026-35198: HeyForm vulnerable to stored XSS via form field titleshttps://agentprime.io/advisories/CVE-2026-35198/https://agentprime.io/advisories/CVE-2026-35198/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 15:47:21 GMTCVEcriticalCVE-2026-45797: HeyForm Vulnerable to Stored XSS via Unauthenticated SVG File Uploadhttps://agentprime.io/advisories/CVE-2026-45797/https://agentprime.io/advisories/CVE-2026-45797/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 15:43:13 GMTCVE