Drupal Commerce Paybox security vulnerabilities

Drupal Commerce Paybox is a payment plugin for the Drupal community. There are security vulnerabilities in the Drupal Commerce Paybox versions 7-x-1.0 to 7.X-1.5. These vulnerabilities stem from improper encryption signature verification, which may lead to authentication bypasses...

Drupal Tagify security vulnerability

Drupal Tagify is a Drupal module from the Drupal community that integrates the Tagify JavaScript library. Versions of Drupal Tagify prior to 1.2.44 contained a security vulnerability, which was caused by improper input handling and could lead to cross-site scripting attacks...

Drupal CKEditor 5 Premium Features: Security Vulnerabilities

Drupal CKEditor 5 Premium Features is an editor extension module within the Drupal community. There are security vulnerabilities in Drupal CKEditor 5 Premium Features, which stem from using alternative paths or channels to bypass authentication, potentially leading to functionality bypasses. The...

Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007

This module enables you to turn a Drupal install into the Central Authentication System CAS. It makes your database the primary location for other systems to use for authentication in a SSO environment. The module doesn't sufficiently sanitize user-supplied field values configured to be included ...

Drupal AI security vulnerabilities

Drupal AI is a module or solution within the Drupal community that integrates artificial intelligence capabilities. Versions of Drupal AI prior to 1.0.7, 1.1.7, and 1.2.4 contain security vulnerabilities. These vulnerabilities stem from improper input during web page generation, which may lead to...

Drupal Form Builder security vulnerabilities

Drupal Form Builder is a form generation plugin for the Drupal community. Versions 7.X-1.0 to 7.X-1.22 of Drupal Form Builder have security vulnerabilities. These vulnerabilities stem from improper input handling during form generation, which may lead to cross-site scripting attacks...

PT-2026-5243

Name of the Vulnerable Software and Affected Versions Drupal Central Authentication System CAS Server versions prior to 2.0.3 Drupal Central Authentication System CAS Server versions 2.1.0 through 2.1.1 Description The Central Authentication System CAS Server module for Drupal does not adequately...

PT-2026-5190

Improper Verification of Cryptographic Signature vulnerability in Drupal Drupal Commerce Paybox Commerce Paybox on Drupal 7.X allows Authentication Bypass.This issue affects Drupal Commerce Paybox: from 7-x-1.0 through 7.X-1.5...

Drupal Next.js security vulnerabilities

Drupal Next.js is a module within the Drupal community that enables a deep integration between Drupal and Next.js. Versions of Drupal Next.js prior to 1.6.4 and 2.0.1 contained security vulnerabilities. These vulnerabilities were due to overly lax cross-domain security policies, which could lead ...

Drupal HTTP Client Manager security vulnerability

The Drupal HTTP Client Manager is an HTTP client management plugin for the Drupal community. Versions prior to 9.3.13, 10.0.2, and 11.0.1 of the Drupal HTTP Client Manager contained security vulnerabilities. These vulnerabilities were due to improper exception condition checks, which could lead t...

Drupal Login Time Restriction security vulnerability

Drupal Login Time Restriction is a login time restriction plugin for the Drupal community. Versions of Drupal Login Time Restriction prior to 1.0.3 contained a security vulnerability, which was caused by a cross-site request forgeing issue, potentially allowing cross-site request forgeing attacks...

PT-2026-5199

Name of the Vulnerable Software and Affected Versions Drupal CKEditor 5 Premium Features versions 0.0.0 through 1.2.9 Drupal CKEditor 5 Premium Features versions 1.3.0 through 1.3.5 Drupal CKEditor 5 Premium Features versions 1.4.0 through 1.4.2 Drupal CKEditor 5 Premium Features versions 1.5.0...

CVE-2026-23950 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, drupal, kibana, redisinsight, gitlab-rails-ce-fips, renovate, pulumi, kubeflow-katib, opensearch-dashboards-fips, graalvm, pnpm-stage0, opensearch-dashboards, tileserver-gl, wazuh-dashboard-fips, prism, vitess, kubeflow-centraldashboard, code-server,...

GHSA-R6Q2-HW4H-H46W vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, drupal, kibana, redisinsight, gitlab-rails-ce-fips, renovate, pulumi, kubeflow-katib, opensearch-dashboards-fips, graalvm, pnpm-stage0, opensearch-dashboards, tileserver-gl, wazuh-dashboard-fips, prism, vitess, kubeflow-centraldashboard, code-server,...

GHSA-XXJR-MMJV-4GPG vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, drupal, jitsucom-jitsu, kibana, redisinsight, gitlab-rails-ce-fips, renovate, pelias-api, langfuse, kubeflow-katib, opensearch-dashboards-fips, semaphore, argo-workflows, arangodb, wazuh-dashboard-fips, opensearch-dashboards, foxx-cli, prism, vitess,...

CVE-2025-13465 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, drupal, jitsucom-jitsu, kibana, redisinsight, gitlab-rails-ce-fips, renovate, pelias-api, langfuse, kubeflow-katib, opensearch-dashboards-fips, semaphore, argo-workflows, arangodb, wazuh-dashboard-fips, opensearch-dashboards, foxx-cli, prism, vitess,...

CVE-2026-24001 vulnerabilities

Vulnerabilities for packages: drupal, redisinsight, renovate, grafana-fips, langfuse, kubeflow-katib, semaphore, argo-workflows, graalvm, tileserver-gl, prism, vitess, langfuse-fips, npm, grafana, tileserver-gl-fips, thingsboard-fips, thingsboard, saf, sqlpad, ts-patch, actions-runner, librechat...

Azure Linux 3.0 Security Update: m2crypto / python-pygments (CVE-2019-11358)

The version of m2crypto / python-pygments installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-11358 advisory. - jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles...

CVE-2026-23745 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, drupal, kibana, redisinsight, gitlab-rails-ce-fips, renovate, pulumi, kubeflow-katib, opensearch-dashboards-fips, graalvm, pnpm-stage0, opensearch-dashboards, tileserver-gl, wazuh-dashboard-fips, prism, vitess, kubeflow-centraldashboard, code-server,...

GHSA-8QQ5-RM4J-MR97 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, drupal, kibana, redisinsight, gitlab-rails-ce-fips, renovate, pulumi, kubeflow-katib, opensearch-dashboards-fips, graalvm, pnpm-stage0, opensearch-dashboards, tileserver-gl, wazuh-dashboard-fips, prism, vitess, kubeflow-centraldashboard, code-server,...