CVE-2026-96365

The Drupal Webform module is vulnerable to a Denial of Service (DoS) attack due to an Allocation of Resources Without Limits or Throttling (CWE-770) flaw. The root cause is the insufficient validation of an optional token query value . Specifically, in configurations where a Webform is rendered f...