Advisories for packages from drupal

Listing reported advisories for packages from drupal sorted by their report date.

Drupal Obfuscate Vulnerable to Stored Cross-Site Scripting (XSS)
GitHub

drupal/obfuscate

< 2.0.1

2025-04-03 13:04:13
Drupal Formatter Suite Vulnerable to Cross-Site Scripting (XSS) via Link Element Attributes
GitHub

drupal/formatter_suite

< 2.1.0

2025-04-02 17:16:40
Drupal RapiDoc OAS Field Formatter Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/rapidoc_elements_field_formatter

< 1.0.1

2025-04-02 17:16:25
Drupal Two-factor Authentication (TFA) Vulnerable to Forceful Browsing
GitHub

drupal/tfa

< 1.10.0

2025-04-02 17:16:14
Drupal Link field display mode formatter Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/link_field_display_mode_formatter

< 1.6.0

2025-04-02 17:16:14
Drupal AI Vulnerable to OS Command Injection
GitHub

drupal/ai

< 1.0.5

2025-04-02 17:14:59
Drupal AI Vulnerable to OS Command Injection via Optional Automator Types
GitHub

drupal/ai

< 1.0.5

2025-04-02 17:14:09
Drupal OAuth2 Server Missing Authorization vulnerability
GitHub

drupal/oauth2_server

< 2.1.0

2025-04-02 17:13:35
Drupal Cache Utility Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/cache_utility

< 1.2.1

2025-04-02 17:13:14
Drupal General Data Protection Regulation Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/gdpr

>= 3.1.0, < 3.1.2 · < 3.0.1

2025-04-02 17:12:54
Drupal Configuration Split Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/config_split

>= 2.0.0, < 2.0.2 · < 1.10.0

2025-04-02 17:12:34
Drupal SpamSpan Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/spamspan

< 3.2.1

2025-04-02 17:12:09
Drupal OAuth2 Client Cross-Site Request Forgery (CSRF)
GitHub

drupal/oauth2_client

< 4.1.3

2025-04-02 17:10:49
Drupal Google Tag Cross-Site Request Forgery (CSRF)
GitHub

drupal/google_tag

>= 2.0.0, < 2.0.8 · < 1.8.0

2025-04-02 17:10:33
Drupal Google Tag Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/google_tag

>= 2.0.0, < 2.0.8 · < 1.8.0

2025-04-02 17:10:13
Drupal Authenticator Login Missing Authorization vulnerability
GitHub

drupal/alogin

< 2.0.6

2025-04-02 17:09:04
Drupal AI Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/ai

>= 1.0.0, < 1.0.2

2025-04-02 17:07:48
Drupal Ignition Cross-Site Scripting (XSS) vulnerability
GitHub

drupal/ignition

< 1.0.4

2025-04-02 17:07:24
Drupal Matomo Analytics Cross-Site Request Forgery (CSRF) vulnerability
GitHub

drupal/matomo

< 1.24.0

2025-04-02 17:06:50
Drupal AI Missing Authorization vulnerability
GitHub

drupal/ai

< 1.0.3

2025-04-02 17:05:52
Drupal Core Potential Cross-Site Scripting (XSS) via Error Messages
GitHub

drupal/core

>= 11.0.0, < 11.0.12 · >= 8.0.0, < 10.3.13 · >= 11.1.0, < 11.1.3 · >= 10.4.0, < 10.4.3

2025-04-02 13:55:45
Drupal Core Cross-Site Scripting (XSS) Vulnerability
GitHub

drupal/core

>= 11.0.0, < 11.0.13 · >= 8.0.0, < 10.3.14 · >= 11.1.0, < 11.1.5 · >= 10.4.0, < 10.4.5

2025-04-01 19:06:19
Drupal Core Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability
GitHub

drupal/core

>= 11.0.0, < 11.0.12 · >= 8.0.0, < 10.3.13 · >= 11.1.0, < 11.1.3 · >= 10.4.0, < 10.4.3

2025-04-01 19:06:04
Drupal Core Vulnerable to Forceful Browsing
GitHub

drupal/core

>= 11.0.0, < 11.0.12 · >= 8.0.0, < 10.3.13 · >= 11.1.0, < 11.1.3 · >= 10.4.0, < 10.4.3

2025-04-01 18:03:52
Drupal Core Cross-Site Scripting (XSS)
GitHub

drupal/core

>= 8.8.0, < 10.2.11 · >= 11.0.0, < 11.0.8 · >= 10.3.0, < 10.3.9

2024-12-10 19:09:29
Drupal core Access bypass
GitHub

drupal/core

>= 8.0.0, < 10.2.11 · >= 11.0.0, < 11.0.8 · >= 10.3.0, < 10.3.9

2024-12-10 19:09:24
Drupal core contains a potential PHP Object Injection vulnerability
GitHub

drupal/core

>= 8.8.0, < 10.2.11 · >= 11.0.0, < 11.0.8 · >= 10.3.0, < 10.3.9

2024-12-10 19:09:24
Drupal core contains a potential PHP Object Injection vulnerability
GitHub

drupal/core

>= 8.8.0, < 10.2.11 · >= 11.0.0, < 11.0.8 · >= 10.3.0, < 10.3.9

2024-12-10 19:09:24
Drupal core contains a potential PHP Object Injection vulnerability
GitHub

drupal/core

>= 8.8.0, < 10.2.11 · >= 10.3.0, < 10.3.9 · >= 7.0, < 7.102

2024-12-10 19:09:20
Drupal core vulnerable to improper error handling
GitHub

drupal/core

>= 10.0.0, < 10.2.10

2024-12-05 19:58:25
Drupal core Denial of Service
GitHub

drupal/core

>= 10.2.0, < 10.2.2 · >= 10.1.0, < 10.1.8

2024-12-05 19:58:07
Drupal has open redirect vulnerability in the Overlay module
GitHub

drupal/drupal

>= 7.0, < 7.24

2024-10-30 17:57:21
Drupal Full Path Disclosure
GitHub

drupal/drupal

>= 8.0.0, <= 11.0.4 · >= 11.0.0, < 11.0.5 · >= 10.3.0, < 10.3.6 · >= 8.0.0, < 10.3.6 · >= 8.0.0, < 10.2.9 · = 11.x-dev

2024-10-08 14:54:52
Drupal Cross-Site Scripting (XSS) affecting CKEditor Third-party library
GitHub

drupal/drupal

>= 9.0.0, < 9.1.12 · >= 8.0.0, < 8.9.16 · >= 9.2.0, < 9.2.4

2024-05-15 21:02:57
Drupal core Arbitrary PHP code execution
GitHub

drupal/drupal

>= 8.9.0, < 8.9.10 · >= 8.0.0, < 8.8.12 · >= 9.0.0, < 9.0.9 · >= 7.0.0, < 7.75

2024-05-15 21:02:37
Drupal core uses a vulnerable Third-party library CKEditor
GitHub

drupal/drupal

>= 8.0.0, < 8.7.12 · >= 8.8.0, < 8.8.4

2024-05-15 21:02:02
Drupal core Open Redirect vulnerability
GitHub

drupal/drupal

>= 7.0.0, < 7.70

2024-05-15 21:01:42
Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1 · >= 7.0.0, < 7.69

2024-05-15 21:00:52
Drupal core Access control bypass
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 21:00:37
Drupal core Denial of Service
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:59:58
Drupal core Remote Code Execution
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8 · >= 7.0, < 7.60

2024-05-15 20:59:27
Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:57:21
Drupal Malicious file upload with filenames stating with dot
GitHub

drupal/drupal

>= 8.0.0, < 8.7.11 · >= 8.8.0, < 8.8.1

2024-05-15 20:55:23
Drupal Anonymous Open Redirect
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:54:52
Drupal Content moderation Access bypass
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8

2024-05-15 20:53:26
Drupal External URL injection through URL aliases leading to Open Redirect
GitHub

drupal/drupal

>= 8.6.0, < 8.6.2 · >= 8.0.0, < 8.5.8 · >= 7.0, < 7.60

2024-05-15 20:52:46
Drupal core Cross-site Scripting (XSS) vulnerability in ckeditor
GitHub

drupal/core

>= 8.0.0, < 8.8.10 · >= 9.0.0, < 9.0.6 · >= 8.9.0, < 8.9.6

2024-05-15 20:52:05
Drupal core Cross-site Scripting (XSS) vulnerability
GitHub

drupal/core

>= 9.0.0, < 9.0.12 · >= 8.0.0, < 8.9.14 · >= 9.1.0, < 9.1.7 · >= 7.0.0, < 7.80

2024-05-15 20:51:57
Drupal core Cross-Site Scripting (XSS) vulnerabilities
GitHub

drupal/core

>= 9.1.0, < 9.1.12 · >= 8.0.0, < 8.9.18 · >= 9.2.0, < 9.2.4

2024-05-15 20:51:27
Drupal core Arbitrary PHP code execution
GitHub

drupal/core

>= 8.9.0, < 8.9.10 · >= 8.0.0, < 8.8.12 · >= 9.0.0, < 9.0.9 · >= 7.0.0, < 7.75

2024-05-15 20:50:25
« Previous Next »

Showing 1 to 50 of 286 results

1 2 3 4 5 6