Security advisories

high2024-05-15

Drupal core Arbitrary PHP code execution

GHSA-gxxj-g9v8-w28p

medium2024-05-15

Drupal core Open Redirect vulnerability

GHSA-6gf6-24h2-66j4

medium2024-05-15

Drupal core uses a vulnerable Third-party library CKEditor

GHSA-v273-j5hq-26xp

high2024-05-15

Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar

GHSA-98h9-727m-44qv

medium2024-05-15

Drupal core Access bypass

GHSA-mh4h-27gq-cxwj

medium2024-05-15

Drupal core unrestricted file upload

GHSA-7gwj-7fhm-vw4w

medium2024-05-15

Drupal core Denial of Service

GHSA-pr99-c33p-fwf6

critical2024-05-15

Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution

GHSA-7v68-3pr5-h3cr

critical2024-05-15

Drupal core Remote Code Execution

GHSA-6mgp-v5cm-ghg5

medium2024-05-15

Drupal Anonymous Open Redirect

GHSA-gfvf-2f25-f34r

medium2024-05-15

Drupal External URL injection through URL aliases leading to Open Redirect

GHSA-7f4f-p7mq-p4fv

medium2024-05-15

Drupal Content moderation Access bypass

GHSA-f84q-mgj9-8jfc

critical2024-04-23

Drupal Core Remote Code Execution Vulnerability

GHSA-297x-j9pm-xjgg · CVE-2018-7602

medium2024-02-12

Drupal core Denial of Service vulnerability

GHSA-6ccv-8fgf-cjpw

critical2024-01-11

Drupal Improper Access Control

GHSA-xq62-62c9-22mg · CVE-2019-6342

critical2023-09-28

Cache poisoning in drupal/core

GHSA-rjqg-3h9m-fx5x · CVE-2023-5256

critical2023-04-26

Access bypass in Drupal core

GHSA-8849-cv9f-vccm · CVE-2023-31250

high2023-04-26

Improper input validation in Drupal core

GHSA-g36h-4jr6-qmm9 · CVE-2022-25273

medium2023-04-26

Access bypass in Drupal core

GHSA-7jr4-hgqx-vwgq · CVE-2022-25274

medium2023-04-26

Lack of domain validation in Druple core

GHSA-4wfq-jc9h-vpcx · CVE-2022-25276