GHSA-9PPJ-QMQM-Q256 vulnerabilities

Vulnerabilities for packages: drupal, gemini-cli, gitlab-rails-ce-fips, tensorflow-cpu-jupyter, wazuh-dashboard-fips, wazuh-dashboard, graalvm, sqlpad, actions-runner, renovate, saf, opensearch-dashboards, py3-jupyterlab, kubeflow-katib, opensearch-dashboards-fips, tileserver-gl-fips, kibana,...

CVE-2026-31802 vulnerabilities

Vulnerabilities for packages: drupal, gemini-cli, gitlab-rails-ce-fips, tensorflow-cpu-jupyter, wazuh-dashboard-fips, wazuh-dashboard, graalvm, sqlpad, actions-runner, renovate, saf, opensearch-dashboards, py3-jupyterlab, kubeflow-katib, opensearch-dashboards-fips, tileserver-gl-fips, kibana,...

DRUPAL-CONTRIB-2026-029

This module creates permissions per node content type to control access to unpublished nodes per content type. The module does not consistently control access for unpublished translated nodes...

DRUPAL-CONTRIB-2026-028

The module and certain submodules AI Automators, AI Translate, AI API Explorer, AI Content Suggestions provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser. Under certain circumstances, rendering of this HTML can lead to exposing secret communications in the...

Exploit for CVE-2026-32612

Security Advisories Independent vulnerability disclosures and...

Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices

SAP has released security updates to address two critical security flaws that could be exploited to achieve arbitrary code execution on affected systems. The vulnerabilities in question listed below - CVE-2019-17571 CVSS score: 9.8 - A code injection vulnerability in SAP Quotation Management...

AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028

The module and certain submodules AI Automators, AI Translate, AI API Explorer, AI Content Suggestions provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser. Under certain circumstances, rendering of this HTML can lead to exposing secret communications in the...

PT-2026-28635

Name of the Vulnerable Software and Affected Versions Drupal AI versions 0.0.0 through 1.1.10 Drupal AI versions 1.2.0 through 1.2.11 Description An incorrect authorization issue exists in Drupal AI Artificial Intelligence that allows for resource injection. The module and certain submodules AI...

PT-2026-28676

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 1.7.0 Description An incorrect authorization issue exists in Drupal’s Unpublished Node Permissions, allowing forceful browsing. The problem relates to inconsistent access control for unpublished translated nodes. The...

Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-029

This module creates permissions per node content type to control access to unpublished nodes per content type. The module does not consistently control access for unpublished translated nodes...

CVE-2026-29786 vulnerabilities

Vulnerabilities for packages: drupal, redisinsight, gemini-cli, gitlab-rails-ce-fips, tensorflow-cpu-jupyter, wazuh-dashboard-fips, wazuh-dashboard, graalvm, sqlpad, actions-runner, renovate, saf, opensearch-dashboards, npm, py3-jupyterlab, kubeflow-katib, prism, opensearch-dashboards-fips,...

GHSA-QFFP-2RHF-9H96 vulnerabilities

Vulnerabilities for packages: drupal, redisinsight, gemini-cli, gitlab-rails-ce-fips, tensorflow-cpu-jupyter, wazuh-dashboard-fips, wazuh-dashboard, graalvm, sqlpad, actions-runner, renovate, saf, opensearch-dashboards, npm, py3-jupyterlab, kubeflow-katib, prism, opensearch-dashboards-fips,...

GHSA-QPX9-HPMF-5GMW vulnerabilities

Vulnerabilities for packages: drupal, vitess, renovate, prism, kubeflow-centraldashboard, kubeflow-katib...

CVE-2026-27601 vulnerabilities

Vulnerabilities for packages: drupal, vitess, renovate, prism, kubeflow-centraldashboard, kubeflow-katib...

DRUPAL-CONTRIB-2026-027

This module enables you to use an external OpenID Connect login provider to authenticate and log in users on your site. If a user signs in with a login provider for the first time on the website, a new Drupal user will be created. The module doesn't sufficiently validate the uniqueness of certain...

DRUPAL-CONTRIB-2026-026

This module enables you to use an external OpenID Connect login provider to authenticate and log in users on your site. If a user signs in with a login provider for the first time on the website, a new Drupal user will be created. A visitor who successfully logs in to their Identity Provider and ...

DRUPAL-CONTRIB-2026-025

This module enables you to use an external OpenID Connect login provider to authenticate and log in users on your site. If a user signs in with a login provider for the first time on the website, a new Drupal user will be created. The module doesn't sufficiently validate certain fields coming fro...

DRUPAL-CONTRIB-2026-024

The Google Analytics GA4 module enables users to add custom attributes to the script tag used to load the Google Analytics library. The module does not sufficiently sanitize these attributes. This vulnerability is mitigated by the fact that an attacker must have a role with the "ga4 configure" or...

DRUPAL-CONTRIB-2026-023

This module extends the Drupal form API adding "Calculation element" form element types, which can evaluate a maths expression. It offers webform integration. The module doesn't sufficiently validate user input; this could be exploited to achieve Information Disclosure or Cross-site Scripting XSS...

DRUPAL-CONTRIB-2026-022

AJAX Dashboard: Entity Dashboards enables you to create configurable dashboards attached to entities which include AJAX-reloading of a main content area based on inputs from a configurable set of buttons. The module doesn't sufficiently check access on the dashboard configuration route...