EUVD-2026-113567

Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.5...

CVE-2026-107267

The DKAN module for Drupal is vulnerable to a Missing Authorization vulnerability, which allows for Forceful Browsing . The issue arises because the module fails to correctly check access for all of its endpoints when exposing tabular data via a JSON API . This affects DKAN versions 0.0.0 to 4.0....

DRUPAL-CONTRIB-2026-208

The DKAN module enables organizations and individuals to build open data portals in Drupal. The DKAN datastore imports tabular data files into database tables and exposes them for querying with a JSON API. The module does not correctly check access for all of its endpoints, leading to a potential...

PT-2026-107758

The DKAN module enables organizations and individuals to build open data portals in Drupal. The DKAN datastore imports tabular data files into database tables and exposes them for querying with a JSON API. The module does not correctly check access for all of its endpoints, leading to a potential...

DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208

The DKAN module enables organizations and individuals to build open data portals in Drupal. The DKAN datastore imports tabular data files into database tables and exposes them for querying with a JSON API. The module does not correctly check access for all of its endpoints, leading to a potential...