DRUPAL-CONTRIB-2026-107

The module provides a permission that allows users to configure email templates containing Twig code. This permission was not marked as restricted. A site administrator might inadvertently grant this permission to less-trusted users. This would allow those users to execute Twig within email...

PT-2026-82365

Name of the Vulnerable Software and Affected Versions Content Moderation Notifications versions 0.0.0 through 3.9.0 Description An issue exists where a permission allowing users to configure email templates containing Twig a template engine for web pages was not marked as restricted. If a site...

Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107

The module provides a permission that allows users to configure email templates containing Twig code. This permission was not marked as restricted. A site administrator might inadvertently grant this permission to less-trusted users. This would allow those users to execute Twig within email...