GHSA-MJRX-74JH-7XGW vulnerabilities

Vulnerabilities for packages: nextcloud-server, drupal, privatebin...

EUVD-2026-43093

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions:...

CVE-2026-11914

vulnerability in Drupal Composer allows . This issue affects Composer versions:...

CVE-2026-11913

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions:...

CVE-2026-11915

vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force attack protection versions:...

CVE-2026-11913 Mother May I - Critical - Unsupported - SA-CONTRIB-2026-045

vulnerability in Drupal Mother May I allows . This issue affects Mother May I versions:...

CVE-2026-11915 Brute force attack protection - Critical - Unsupported - SA-CONTRIB-2026-047

vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force attack protection versions:...

CVE-2026-11915 Brute force attack protection - Critical - Unsupported - SA-CONTRIB-2026-047

vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force attack protection versions:...

CVE-2026-55806 Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Drupal Drupal core allows Content Spoofing. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0., from 0.0.0 to 11.1...

CVE-2026-15083

The ECA: Event - Condition - Action module for Drupal is vulnerable to Object Injection due to the improper modification of dynamically-determined object attributes. Additionally, the Render submodule fails to sufficiently sanitize template code when rendering inline Twig templates within no-code...

PT-2026-43390

Name of the Vulnerable Software and Affected Versions ConeXware, Inc Power Archiver versions prior to 22.00.12 Drupal affected versions not specified Description An issue in the powerarc.exe executable allows a remote attacker to escalate privileges and execute arbitrary code. Separately, a SQL...

CVE-2026-46633 vulnerabilities

Vulnerabilities for packages: drupal...

Exploit for CVE-2026-9082

CVE-2026-9082 / Drupal SA-CORE-2026-004 Proof of Concept...

CVE-2026-9082: Mitigating a Critical SQL Injection Vulnerability in Drupal

Learn how the complex Drupal SQLi vulnerability CVE-2026-9082 exploits PostgreSQL environments and its data theft risks — and how to ensure you’re protected...

CVE-2026-8491

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1...

CVE-2026-8491 Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2.0.0 before 2.0.1...

CVE-2026-8491

The Node View Permissions module for Drupal (a content access control module) is vulnerable to Forceful Browsing due to an improper check for unusual or exceptional conditions. The vulnerability specifically occurs when a user is cancelled and their content is reassigned to an anonymous user , as...

CVE-2026-5343

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:04+00:00| seen| https://www.drupal.org/sa-contrib-2026-031 2026-05-29 00:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmxa6got322o 2026-05-29 00:00:45+00:00| seen|...

CVE-2026-3526 File Access Fix (deprecated) - Moderately critical - Access bypass - SA-CONTRIB-2026-021

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

CVE-2026-3217

The Drupal SAML SSO - Service Provider module, used for SAML-based single sign-on on Drupal sites, contains a reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of user input , which allows attackers to inject malicious scripts into web pages generat...