17308 matches found
CLSA-2026-1788971215 TuxCare security update for drupal/spamspan (1 CVE)
TuxCare rebuilt drupal/spamspan to address 1 CVE. Fixed in 7.1.4-p1+tuxcare...
CLSA-2026-1788970571 TuxCare security update for drupal/colorbox (1 CVE)
TuxCare rebuilt drupal/colorbox to address 1 CVE. Fixed in 7.2.19-p1+tuxcare...
CLSA-2026-1788969961 TuxCare security update for drupal/access_code (1 CVE)
TuxCare rebuilt drupal/accesscode to address 1 CVE. Fixed in 7.1.1-p1+tuxcare...
CLSA-2026-1788969384 TuxCare security update for drupal/colorbox (1 CVE)
TuxCare rebuilt drupal/colorbox to address 1 CVE. Fixed in 2.1.2-p1+tuxcare...
CLSA-2026-1788968613 TuxCare security update for drupal/openid_connect (3 CVEs)
TuxCare rebuilt drupal/openidconnect to address 3 CVEs. Fixed in 7.1.3-p1+tuxcare...
CLSA-2026-1788968317 TuxCare security update for drupal/bootstrap_site_alert (1 CVE)
TuxCare rebuilt drupal/bootstrapsitealert to address 1 CVE. Fixed in 7.1.6-p1+tuxcare...
PT-2026-89251
This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently prevent reuse of previously accepted SAML assertions. Under certain circumstances, a valid assertion may be...
PT-2026-89236
Name of the Vulnerable Software and Affected Versions amazee.ai Drupal provider versions prior to 1.3.7 amazee.ai Drupal provider versions prior to 1.4.3 Description The module integrates AI services into Drupal, utilizing a Postgres/pgvector vector database backend for Search API AI Search. The...
SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151
This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently validate URLs obtained from identity provider metadata. An attacker with the ability to configure identity...
PT-2026-95863
TuxCare rebuilt drupal/link to address 1 CVE. Fixed in 7.1.13-p1+tuxcare...
Patreon - Critical - Unsupported - SA-CONTRIB-2026-139
The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security...
Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153
The Ultimate Table Field module enables you to store table data in a field and edit each table cell through a dialog, using cell field plugins such as text, link, and file. The module doesn't sufficiently protect the route that opens the cell editor dialog. The route is accessible to anonymous...
PT-2026-89249
This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module contains embedded credentials used by the functionality provided by the module. Under certain circumstances, these credentials could...
PT-2026-95864
TuxCare rebuilt drupal/gdpr to address 1 CVE. Fixed in 3.1.0-p1+tuxcare...
PT-2026-95857
TuxCare rebuilt drupal/colorbox to address 1 CVE. Fixed in 2.1.2-p1+tuxcare...
PT-2026-95862
TuxCare rebuilt drupal/gdpr to address 1 CVE. Fixed in 7.1.0-p1+tuxcare...
PT-2026-95858
TuxCare rebuilt drupal/access code to address 1 CVE. Fixed in 7.1.1-p1+tuxcare...
PT-2026-95865
TuxCare rebuilt drupal/spamspan to address 1 CVE. Fixed in 3.2.0-p1+tuxcare...