drupal-jsonapi-sqli-scanner

CVE-2026-9082 — Drupal PostgreSQL SQLインジェクション マススキャナー＆エクスプロイテーションツール Drupal Core における未認証SQLインジェクション（PostgreSQL） PDOプレースホルダー名の悪用による JSON:API フィルター配列キーインジェクション 概要 CVE-2026-9082 は、Drupal 8.0 から 11.3.9 を実行している PostgreSQL バックエンド のすべてのサイトに影響を与える、Drupal Core の重大（Highly...

cve-2026-9082-drupal-postgresql-rce

CVE-2026-9082 Drupal PostgreSQL SQLi를 RCE로 이 저장소에는 Ambionics 기사에서 설명된 Drupal JSON:API PostgreSQL SQL 인젝션을 위한 로컬 랩과 간단한 익스플로잇이 포함되어 있습니다. 익스플로잇의 중요한 부분은 PostgreSQL 권한 상승입니다: 인젝션이 PostgreSQL 슈퍼유저로 SELECT 표현식을 평가할 수 있게 되면, 대형 객체를 통해 네이티브 프리로드 라이브러리를 작성하고, postgresql.auto.conf를 다시 로드하며,...

CVE-2026-9082-Drupal-PoC

CVE-2026-9082 - Drupal Core PostgreSQL SQL Injection PoC 개요 이 저장소는 CVE-2026-9082 에 대한 윤리적 개념 증명PoC입니다. 이는 Drupal Core 의 매우 중요 한 SQL 인젝션 취약점으로, Drupal 8.0부터 11.3.9까지 실행되는 모든 PostgreSQL 기반 사이트에 영향을 미칩니다. 이 결함은 PostgreSQL 엔티티 쿼리 조건 핸들러에 존재하며, 익명인증되지 않은 사용자 가 Drupal 9부터 기본적으로 활성화된 JSON:API 모듈을 통해 악용할...

CVE-2026-61534

Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names as keys in plain-object lookup tables in src/yayson/store.ts and src/yayson/legacy-store.ts. A document whose type i...

EUVD-2026-77579

Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names as keys in plain-object lookup tables in src/yayson/store.ts and src/yayson/legacy-store.ts. A document whose type i...

CVE-2026-9082

CVE-2026-9082 / Drupal SA-CORE-2026-004 개념 증명 면책 조항: 이 개념 증명은 교육 및 연구 목적으로만 제공됩니다. 소유권이 없거나 명시적인 테스트 허가를 받지 않은 시스템에 대해 이 소프트웨어를 사용하지 마십시오. 저자는 이 프로젝트로 인한 오용 또는 손해에 대해 책임을 지지 않습니다. 개요 A Proof-of-Concept poc.py of CVE-2026-9082 Drupal SA-CORE-2026-004는 Drupal 코어의 치명적인 SQL 인젝션 취약점으로, Drupal이...

GHSA-325J-MG25-8Q58 yayson: Prototype pollution in Store/LegacyStore deserialization

Summary Store/LegacyStore key internal lookup tables by the type, id, and relationship names from a JSON:API document. Because these were plain objects, a document with type: "proto" writes onto Object.prototype, polluting every object in the process. Severity Suggested CVSS v3.1...

yayson: Prototype pollution in Store/LegacyStore deserialization

Summary Store/LegacyStore key internal lookup tables by the type, id, and relationship names from a JSON:API document. Because these were plain objects, a document with type: "proto" writes onto Object.prototype, polluting every object in the process. Severity Suggested CVSS v3.1...

PT-2026-90549

Summary Store/LegacyStore key internal lookup tables by the type, id, and relationship names from a JSON:API document. Because these were plain objects, a document with type: " proto " writes onto Object.prototype, polluting every object in the process. Severity Suggested CVSS v3.1...

DRUPAL-CONTRIB-2026-127

This module enables you to restrict access to JSON:API routes based on specific user roles. The module doesn't sufficiently enforce access controls under scenarios where a request mimics an XMLHttpRequest...

DRUPAL-CONTRIB-2026-113

The Entity API module extends the Drupal core entity API to provide a unified way to deal with entities and their properties. The module doesn't correctly apply access controls for JSON:API entity collection endpoints. This exposes an information disclosure vulnerability. This vulnerability is...

Entity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113

The Entity API module extends the Drupal core entity API to provide a unified way to deal with entities and their properties. The module doesn't correctly apply access controls for JSON:API entity collection endpoints. This exposes an information disclosure vulnerability. This vulnerability is...

PT-2026-82362

Name of the Vulnerable Software and Affected Versions Entity API versions 0.0.0 through 1.8.0 Description An incorrect authorization issue in the Entity API allows forceful browsing. The module fails to correctly apply access controls for JSON:API entity collection endpoints, leading to an...

CVE-2026-57954 Elide 7.1.17 - Permission Bypass in Sort Expression Validation

Elide through 7.1.17 fails to enforce @ReadPermission on client-supplied sort expressions in SortingImpl.getValidSortingRules, allowing attackers to sort collections by forbidden fields. Attackers can infer hidden field values through row ordering analysis, leaking relative field ordering across...

Drupal Core PostgreSQL EntityQuery SQL Injection

This module detects CVE-2026-9082, an unauthenticated SQL injection in Drupal core's PostgreSQL EntityQuery condition handler. It uses a crafted JSON:API filter array key to confirm the vulnerability with time-based blind SQL injection. MySQL, MariaDB, and SQLite are not affected. The configured...

EUVD-2022-5673

Malicious code in bioql PyPI...

EUVD-2023-2586

Malicious code in bioql PyPI...

EUVD-2022-0799

Malicious code in bioql PyPI...

BIT-DRUPAL-2020-13665

Access bypass vulnerability in Drupal Core allows JSON:API when JSON:API is in read/write mode. Only sites that have the readonly set to FALSE under jsonapi.settings config are vulnerable. This issue affects: Drupal Drupal Core 8.8.x versions prior to 8.8.8; 8.9.x versions prior to 8.9.1; 9.0.x...

BIT-DRUPAL-2020-13675

Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access bypass vulnerability. An attacker might be able to upload files that bypass the file validation process implemented by modules on the si...