Acquia Content Hub - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-125

This module provides a centralized content distribution and syndication solution so thta customers can publish, reuse, and syndicate content across a network of Drupal websites. The module doesn't sufficiently protect export routes from cross-site request forgery CSRF attacks, potentially allowin...

EUVD-2022-41092

Malicious code in bioql PyPI...

DRUPAL-CONTRIB-2025-060

This module enables you to seamlessly migrate and deploy content across environments, eliminating manual steps. It simplifies the process by exporting content to a YML file or a ZIP archive, which can be imported into another environment effortlessly. While the export feature rightfully bypasses...

CVE-2019-4054

IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system. IBM X-Force ID: 156563...

Security Bulletin: IBM QRadar SIEM is vulnerable to an Information exposure (CVE-2019-4054)

Summary IBM QRadar SIEM could disclose potentially sensitive information about users during content export. Vulnerability Details CVEID: CVE-2019-4054 Description: IBM QRadar could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further...