PT-2026-95865

TuxCare rebuilt drupal/spamspan to address 1 CVE. Fixed in 3.2.0-p1+tuxcare...

CVE-2026-87951

CVE-2026-87951 affects the SAML SSO – Service Provider Drupal contrib module, which configures a Drupal site as a SAML 2.0 Service Provider for authentication via an external identity provider. The module stores sensitive authentication information in a manner that could allow disclosure to users...

PT-2026-89244

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The miniorange saml module does not sufficiently validate certain user-supplied URLs before performing redirects. An attacker could cause users...

PT-2026-89242

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The miniorange saml module does not correctly restrict access to certain functionality intended for administrative use. This could allow...

PT-2026-89238

The CSP Log module enhances any module that adds the CSP header to a site, by providing a reporting endpoint, custom storage, and aggregated reports that can be used to trace issues or adapt the CSP headers. The module did not sufficiently sanitize user-supplied values used in database queries,...

PT-2026-89250

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module stores sensitive authentication information in a manner that could allow disclosure to users with access to configuration or related...

PT-2026-89252

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not sufficiently validate URLs obtained from identity provider metadata. An attacker with the ability to configure identity...

PT-2026-89254

The Ultimate Table Field module enables you to store table data in a field and edit each table cell through a dialog, using cell field plugins such as text, link, and file. The module doesn't sufficiently protect the route that opens the cell editor dialog. The route is accessible to anonymous...

PT-2026-89245

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module uses cryptographic constructions that do not align with current security best practices. The module performs certain signature...

PT-2026-95856

TuxCare rebuilt drupal/openid connect to address 3 CVEs. Fixed in 7.1.3-p1+tuxcare...

PT-2026-89237

This module enables you to turn a Drupal install into the Central Authentication System CAS Server. It makes your database the primary location for other systems to use for authentication in a SSO environment. The module doesn't sufficiently check the service URL used to redirect the user during...

CVE-2026-87937

CVE-2026-87937 affects the Drupal CAS Server contrib module, which turns a Drupal installation into a Central Authentication System (CAS) Server for SSO environments. The root cause is that the module does not sufficiently validate the service URL used to redirect users during logout , resulting ...

PT-2026-95859

TuxCare rebuilt drupal/colorbox to address 1 CVE. Fixed in 7.2.19-p1+tuxcare...

CVE-2026-87936

CVE-2026-87936 affects the Drupal contrib module amazee.ai Private AI Provider (SA-CONTRIB-2026-134), rated Critical by the Drupal security team. The vulnerability is an SQL injection in the module's Postgres/pgvector vector database backend used with Search API AI Search : filter values are not ...

CVE-2026-87940

CVE-2026-87940 affects a Drupal contrib module that enables key-based authentication on a per-user basis. The module does not cache authentication keys per user, which can allow an attacker with the same permissions as another user to view that user's authentication keys, resulting in an access b...

CVE-2026-87946

CVE-2026-87946 affects the SAML SSO – Service Provider Drupal module, which enables a Drupal site to act as a SAML 2.0 Service Provider for external identity-provider authentication. The vulnerability stems from weak cryptographic practices : the module performs signature comparisons using non-co...

PT-2026-89239

The Feed Block module provides a block content type that displays items pulled from a remote RSS/Atom feed. The module does not sufficiently validate or sanitize the RSS feed it generates, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2026-87939

CVE-2026-87939 affects the Drupal Feed Block module, which provides a block content type that displays items pulled from a remote RSS/Atom feed. The module does not sufficiently validate or sanitize the RSS feed it generates, resulting in a stored cross-site scripting (XSS) vulnerability. Drupal ...

CVE-2026-87953

The affected software is the SAML SSO – Service Provider Drupal module, which allows a Drupal site to act as a SAML 2.0 Service Provider for authentication via an external identity provider. The vulnerability is a Server-Side Request Forgery (SSRF) resulting from insufficient validation of URLs o...

CVE-2026-87942

CVE-2026-87942 affects the SafeDelete Drupal contrib module, which manages content deletion and provides reports for identifying orphaned content. The root cause is insufficient sanitization of node titles when displaying the orphaned nodes report, resulting in a persistent cross-site scripting (...