← Back to all sparks
F

Formbricks

SUPPORT
Velocity6.3

Open-source survey and customer experience management platform.

Formbricks runs parallel 5.1/5.2 release trains, hardening tenant isolation and security.

surveysopen sourcemulti-tenancysecurityaccessibilityrelease-trains
Current state
Formbricks, the open-source survey and experience-management platform, is in a fast RC-driven cadence maintaining two release lines (5.1.x and 5.2.x) at once. The dominant theme is security and multi-tenancy: enforcing organization/workspace scoping across API keys, surveys, quotas, and integrations, plus dependency patches for known CVEs. Alongside that sit smaller reliability and accessibility fixes. This is stabilization work, not new capability.
Where it's heading
The backported tenant-scoping work signals Formbricks tightening its self-host and multi-org story ahead of a stable 5.2 — the kind of isolation guarantees larger and regulated deployments require. Expect the RC churn to converge on stable 5.1.5 and 5.2.1 releases, with security scoping and survey-player accessibility as the through-lines.
Prediction
Next likely moves are stable cuts of 5.1.5 and 5.2.1 once the RCs settle, continuing the org/workspace isolation and CVE-patching pattern rather than shipping headline features.

Recent moves

  1. 2d ago

    Formbricks 5.2.1-rc.2: patch tar decompression DoS

    Bumps tar to 7.5.19 to patch a decompression DoS, backported to the 5.2 line. A routine security dependency patch with no user-facing change.

    View source ↗
  2. 3d ago

    Formbricks 5.1.5-rc.1: enforce org/workspace scoping

    Enforces organization/workspace scoping across API keys, surveys, quotas, and integrations — a real multi-tenant isolation hardening, here backported to the 5.1 line. Central to the security theme running through both release trains.

    View source ↗
  3. 3d ago

    Formbricks 5.2.1-rc.1: org/workspace scoping backport

    The same organization/workspace scoping enforcement backported to the 5.2 line, keeping the tenant-isolation fix consistent across both maintained versions.

    View source ↗
  4. 4d ago

    Formbricks 5.2.0-rc.7: fix Helm image validation

    Corrects Helm release image validation for the 5.2 backport. Deployment-plumbing fix with no user-visible effect.

    View source ↗
  5. 4d ago

    Formbricks 5.2.0-rc.6: recoverable failed taxonomy runs

    Makes failed taxonomy runs actionable and recoverable rather than dead-ending. A small but real reliability improvement to how the system surfaces and recovers from failures.

    View source ↗
  6. 4d ago

    Formbricks 5.2.0-rc.5: survey-player a11y + MCP OAuth fix

    Fixes reading the correct field from the OAuth consent response for MCP, and overhauls survey-player accessibility with screen-reader semantics and a WCAG keyboard/focus model. Accessibility work that materially improves the respondent experience.

    View source ↗