{"uuid": "cf31724e-7a43-4a7b-afb7-be8c6cfd35d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63429", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116953416257282503", "content": "CVE-2026-63429 - Critical auth bypass in Heyform open-source form builder. Anonymous users can upload files up to 10MB to a public URL with no authentication checks. CVSS 8.6. No patch yet - restrict access immediately. #CVE #Heyform #infosec\nhttps://www.valtersit.com/cve/CVE-2026-63429/", "creation_timestamp": "2026-07-20T17:11:49.339882Z"}