PT-2025-2097 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal Block permissions versions 1.0.0 through 1.2.0 Description: The issue is related to an incorrect authorization mechanism in the Block permissions module of the Drupal CMS system. This can allow a remote attacker to impact the...

mercenary-core (>=2.19.0 <=2.62.3) potentially affected by CVE-2018-1000160 via @risingstack/protect (>=1.0.0 <=1.2.0)

@risingstack/protect NPM version =1.0.0, =2.19.0, =2.62.3 Source cves: CVE-2018-1000160 Source advisory: OSV:GHSA-VPCH-RXW3-FGX8...