DRUPAL-CONTRIB-2026-227

See a problem?
Import Source
https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/dopup/DRUPAL-CONTRIB-2026-227.json
JSON Data
https://api.osv.dev/v1/vulns/DRUPAL-CONTRIB-2026-227
Aliases
  • CVE-2026-114530
Published
2026-10-21T17:40:37Z
Modified
2026-10-21T18:15:02Z
Summary
[none]
Details

The Dopup module provides functionality for selecting and working with Webforms.

The module does not perform sufficient entity access checking in some cases and may expose the title of private Webforms.

References
Credits

Affected packages

Packagist:https://packages.drupal.org/8 / drupal/dopup

Package

Name
drupal/dopup
Purl
pkg:composer/drupal/dopup?repository_url=https:%2F%2Fpackages.drupal.org%2F8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.7
Database specific
Show details 
{
    "constraint":  "<1.0.7"
}

Database specific

affected_versions 
"<1.0.7"
source 
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/dopup/DRUPAL-CONTRIB-2026-227.json"