Advisories for packages from drupal

Listing reported advisories for packages from drupal sorted by their report date.

Drupal Admin Audit Trail Allocation of Resources Without Limits or Throttling vulnerability
GitHub

drupal/admin_audit_trail

< 1.0.5

2025-06-11 18:09:46
Drupal Lightgallery Cross-site Scripting vulnerability
GitHub

drupal/lightgallery

< 1.6.0

2025-06-11 18:04:11
Drupal Quick Node Block Missing Authorization vulnerability
GitHub

drupal/quick_node_block

< 2.0.0

2025-06-11 18:03:20
Drupal Commerce Alphabank Redirect Incorrect Authorization vulnerability
GitHub

drupal/commerce_alphabank_redirect

< 1.0.3

2025-06-11 18:02:50
Drupal Commerce Eurobank (Redirect) Incorrect Authorization vulnerability
GitHub

drupal/commerce_eurobank_redirect

< 2.1.1

2025-06-11 17:49:59
Drupal Quick Node Block Missing Authorization vulnerability
GitHub

drupal/quick_node_block

< 2.0.0

2025-06-11 17:48:13
Drupal Obfuscate Vulnerable to Stored Cross-Site Scripting (XSS)
GitHub

drupal/obfuscate

< 2.0.1

2025-04-03 13:04:13
Drupal Formatter Suite Vulnerable to Cross-Site Scripting (XSS) via Link Element Attributes
GitHub

drupal/formatter_suite

< 2.1.0

2025-04-02 17:16:40
Drupal RapiDoc OAS Field Formatter Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/rapidoc_elements_field_formatter

< 1.0.1

2025-04-02 17:16:25
Drupal Two-factor Authentication (TFA) Vulnerable to Forceful Browsing
GitHub

drupal/tfa

< 1.10.0

2025-04-02 17:16:14
Drupal Link field display mode formatter Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/link_field_display_mode_formatter

< 1.6.0

2025-04-02 17:16:14
Drupal AI Vulnerable to OS Command Injection
GitHub

drupal/ai

< 1.0.5

2025-04-02 17:14:59
Drupal AI Vulnerable to OS Command Injection via Optional Automator Types
GitHub

drupal/ai

< 1.0.5

2025-04-02 17:14:09
Drupal OAuth2 Server Missing Authorization vulnerability
GitHub

drupal/oauth2_server

< 2.1.0

2025-04-02 17:13:35
Drupal Cache Utility Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/cache_utility

< 1.2.1

2025-04-02 17:13:14
Drupal General Data Protection Regulation Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/gdpr

>= 3.1.0, < 3.1.2 · < 3.0.1

2025-04-02 17:12:54
Drupal Configuration Split Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/config_split

>= 2.0.0, < 2.0.2 · < 1.10.0

2025-04-02 17:12:34
Drupal SpamSpan Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/spamspan

< 3.2.1

2025-04-02 17:12:09
Drupal OAuth2 Client Cross-Site Request Forgery (CSRF)
GitHub

drupal/oauth2_client

< 4.1.3

2025-04-02 17:10:49
Drupal Google Tag Cross-Site Request Forgery (CSRF)
GitHub

drupal/google_tag

>= 2.0.0, < 2.0.8 · < 1.8.0

2025-04-02 17:10:33
Drupal Google Tag Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/google_tag

>= 2.0.0, < 2.0.8 · < 1.8.0

2025-04-02 17:10:13
Drupal Authenticator Login Missing Authorization vulnerability
GitHub

drupal/alogin

< 2.0.6

2025-04-02 17:09:04
Drupal AI Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/ai

>= 1.0.0, < 1.0.2

2025-04-02 17:07:48
Drupal Ignition Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/ignition

< 1.0.4

2025-04-02 17:07:24
Drupal Matomo Analytics Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/matomo

< 1.24.0

2025-04-02 17:06:50
Drupal AI Missing Authorization vulnerability
GitHub

drupal/ai

< 1.0.3

2025-04-02 17:05:52
Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages
GitHub

drupal/core

>= 11.0.0, < 11.0.12 · >= 8.0.0, < 10.3.13 · >= 11.1.0, < 11.1.3 · >= 10.4.0, < 10.4.3

2025-04-02 13:55:45
Drupal Core Cross-Site Scripting (XSS) Vulnerability
GitHub

drupal/core

>= 11.0.0, < 11.0.13 · >= 8.0.0, < 10.3.14 · >= 11.1.0, < 11.1.5 · >= 10.4.0, < 10.4.5

2025-04-01 19:06:19
Drupal Core Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability
GitHub

drupal/core

>= 11.0.0, < 11.0.12 · >= 8.0.0, < 10.3.13 · >= 11.1.0, < 11.1.3 · >= 10.4.0, < 10.4.3

2025-04-01 19:06:04
Drupal Core Vulnerable to Forceful Browsing
GitHub

drupal/core

>= 11.0.0, < 11.0.12 · >= 8.0.0, < 10.3.13 · >= 11.1.0, < 11.1.3 · >= 10.4.0, < 10.4.3

2025-04-01 18:03:52
Drupal Core Cross-Site Scripting (XSS)
GitHub

drupal/core

>= 8.8.0, < 10.2.11 · >= 11.0.0, < 11.0.8 · >= 10.3.0, < 10.3.9

2024-12-10 19:09:29
Drupal core Access bypass
GitHub

drupal/core

>= 8.0.0, < 10.2.11 · >= 11.0.0, < 11.0.8 · >= 10.3.0, < 10.3.9

2024-12-10 19:09:24
Drupal core contains a potential PHP Object Injection vulnerability
GitHub

drupal/core

>= 8.8.0, < 10.2.11 · >= 11.0.0, < 11.0.8 · >= 10.3.0, < 10.3.9

2024-12-10 19:09:24
Drupal core contains a potential PHP Object Injection vulnerability
GitHub

drupal/core

>= 8.8.0, < 10.2.11 · >= 11.0.0, < 11.0.8 · >= 10.3.0, < 10.3.9

2024-12-10 19:09:24
Drupal core contains a potential PHP Object Injection vulnerability
GitHub

drupal/core

>= 8.8.0, < 10.2.11 · >= 10.3.0, < 10.3.9 · >= 7.0, < 7.102

2024-12-10 19:09:20
Drupal core vulnerable to improper error handling
GitHub

drupal/core

>= 10.0.0, < 10.2.10

2024-12-05 19:58:25
Drupal core Denial of Service
GitHub

drupal/core

>= 10.2.0, < 10.2.2 · >= 10.1.0, < 10.1.8

2024-12-05 19:58:07
Drupal has open redirect vulnerability in the Overlay module
GitHub

drupal/drupal

>= 7.0, < 7.24

2024-10-30 17:57:21
Drupal Full Path Disclosure
GitHub

drupal/drupal

>= 8.0.0, <= 11.0.4 · >= 11.0.0, < 11.0.5 · >= 10.3.0, < 10.3.6 · >= 8.0.0, < 10.3.6 · >= 8.0.0, < 10.2.9 · = 11.x-dev

2024-10-08 14:54:52
Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party library
GitHub

drupal/drupal

>= 9.0.0, < 9.1.12 · >= 8.0.0, < 8.9.16 · >= 9.2.0, < 9.2.4

2024-05-15 21:02:57
Drupal core Arbitrary PHP code execution
GitHub

drupal/drupal

>= 8.9.0, < 8.9.10 · >= 8.0.0, < 8.8.12 · >= 9.0.0, < 9.0.9 · >= 7.0.0, < 7.75

2024-05-15 21:02:37
Drupal core uses a vulnerable Third-party library CKEditor
GitHub

drupal/drupal

>= 8.0.0, < 8.7.12 · >= 8.8.0, < 8.8.4

2024-05-15 21:02:02
Drupal core Open Redirect vulnerability
GitHub

drupal/drupal

>= 7.0.0, < 7.70

2024-05-15 21:01:42
Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1 · >= 7.0.0, < 7.69

2024-05-15 21:00:52
Drupal core Access control bypass
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 21:00:37
Drupal core Denial of Service
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:59:58
Drupal core Remote Code Execution
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8 · >= 7.0, < 7.60

2024-05-15 20:59:27
Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:57:21
Drupal Malicious file upload with filenames stating with dot
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:55:23
Drupal Anonymous Open Redirect
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:54:52
« Previous Next »

Showing 1 to 50 of 292 results

1 2 3 4 5 6