GHSA-R488-J9VJ-WX3Q Payload Form Builder has an RCE issue

Impact A vulnerability in @payloadcms/plugin-form-builder in versions = 3.90.0 or = 4.0.0-canary.34...

CVE-2026-19500

The Entries component in Brainstorm Force SureForms version, less than 2.1.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the...

PT-2026-77148

Name of the Vulnerable Software and Affected Versions Brainstorm Force SureForms versions prior to 2.12.3 Description The Entries component fails to enforce adequate limits on user-controlled form fields or submitted content during processing and rendering. This allows a remote attacker to exhaus...