CVE-2026-118574

The Drupal S3 File System (s3fs) module (versions 0.0.0 to 3.12.0 ) contains a vulnerability where it fails to sufficiently isolate upload contexts between separate object operations within the same request. This root cause allows for the potential uploading of objects with incorrect access contr...

EUVD-2026-113692

Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0...