Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
DRUPAL-CORE-2026-016
  • Packagist/drupal/core
 The Navigation module doesn't sufficiently sanitize certain attributes, which... 14 Oct
  • Fix available
DRUPAL-CORE-2026-015
  • Packagist/drupal/core
 The Drupal core Link module provides a field type that can be used for internal... 14 Oct
  • Fix available
DRUPAL-CORE-2026-014
  • Packagist/drupal/core
 A remote code execution vulnerability exists within the Field UI module in... 14 Oct
  • Fix available
DRUPAL-CORE-2026-013
  • Packagist/drupal/core
 See record for full details 16 Sep
  • Fix available
DRUPAL-CORE-2026-012
  • Packagist/drupal/core
 See record for full details 15 Jul
  • Fix available
DRUPAL-CORE-2026-011
  • Packagist/drupal/core
 See record for full details 15 Jul
  • Fix available
DRUPAL-CORE-2026-010
  • Packagist/drupal/core
 See record for full details 15 Jul
  • Fix available
DRUPAL-CORE-2026-009
  • Packagist/drupal/core
 See record for full details 17 Jun
  • Fix available
DRUPAL-CORE-2026-008
  • Packagist/drupal/core
 See record for full details 17 Jun
  • Fix available
DRUPAL-CORE-2026-007
  • Packagist/drupal/core
 See record for full details 17 Jun
  • Fix available
DRUPAL-CORE-2026-006
  • Packagist/drupal/core
 See record for full details 17 Jun
  • Fix available
DRUPAL-CORE-2026-005
  • Packagist/drupal/core
 See record for full details 17 Jun
  • Fix available
GHSA-ghwc-95x2-682j
  • Packagist/drupal/core
 Drupal Core has a SQL Injection issue 20 May
  • Fix available
  • Severity - 9.8 (Critical)
DRUPAL-CORE-2026-004
  • Packagist/drupal/core
 See record for full details 20 May
  • Fix available
GHSA-f3cj-mjqm-fhvj
  • Packagist/drupal/core
 Drupal core is Vulnerable to Cross-Site Scripting 20 May
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-pw6f-3999-xp7g
  • Packagist/drupal/core
 Drupal core allows Cross-Site Scripting (XSS) 20 May
  • Fix available
  • Severity - 6.1 (Medium)
Load more...