CVE-2026-58587

The Drupal Canvas module is vulnerable to a Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. Specifically, the Canvas AI submodule fails to sufficiently validate image files uploaded via a custom API for use in the AI web chat before writing them...

CVE-2026-58588

The Drupal Canvas module is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The module provides a custom API for uploading image files, but the validation rules only verify the file extension while ignoring the MIME type . This allows a...

CVE-2026-1553

The Drupal Canvas module (versions prior to 1.0.4 ) contains an incorrect authorization vulnerability that allows forceful browsing of Canvas Pages. The root cause is that the module does not sufficiently validate access to pages that have been unpublished. While the risk is mitigated by the fact...

CVE-2026-3216

CVE-2026-3216 affects Drupal Canvas module prior to 1.1.1. The privilege-requiring SSRF arises when the hidden Drupal Canvas AI submodule is enabled (often via Drupal Recipes or deployment scripts) and improper sanitization of user-supplied data in messages JSON payloads is exploited. An attacker...