CVE-2026-107267

The DKAN module for Drupal is vulnerable to a Missing Authorization vulnerability, which allows for Forceful Browsing . The issue arises because the module fails to correctly check access for all of its endpoints when exposing tabular data via a JSON API . This affects DKAN versions 0.0.0 to 4.0....

EUVD-2026-113567

Missing Authorization vulnerability in Drupal DKAN allows Forceful Browsing. This issue affects DKAN versions: from 0.0.0 to 4.0.4, from 4.1.0 to 4.1.5...