EUVD-2026-107870

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6...

CVE-2026-81163

The Drupal Media Library Importer module (versions 0.0.0 to 2.1.6 ) is vulnerable to a Path Traversal (CWE-22) vulnerability. The root cause is an unvalidated plain text field used for specifying an import folder. An attacker can point this field at any directory readable by the web user, causing...