Vulnerabilities in Drupal

576 results
CVE-2026-3529MEDIUMGoogle Analytics GA4 - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-024EPSS 0.3%CVE-2025-9552MEDIUMSynchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-102EPSS 0.3%CVE-2025-9553MEDIUMAPI Key manager - Critical - Unsupported - SA-CONTRIB-2025-103EPSS 0.3%CVE-2025-9554MEDIUMOwl Carousel 2 - Critical - Unsupported - SA-CONTRIB-2025-104EPSS 0.3%CVE-2026-84916LOWIslandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126EPSS 0.3%CVE-2025-3733MEDIUMbaguetteBox.js - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-034EPSS 0.2%CVE-2026-110176HIGHFile Force Download for Drupal 7 Access Bypass via Unconditional Download HeadersEPSS 0.2%CVE-2026-87951LOWSAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149EPSS 0.2%CVE-2026-16648LOWMailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128EPSS 0.2%CVE-2025-3902MEDIUMBlock Class - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-043EPSS 0.2%CVE-2025-3901MEDIUMBootstrap Site Alert - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-042EPSS 0.2%CVE-2026-87943MEDIUMSAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141EPSS 0.2%CVE-2026-84917MEDIUMJsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127EPSS 0.2%CVE-2026-0945MEDIUMRole Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002EPSS 0.2%CVE-2026-114539MEDIUMDocCheck Basic - Moderately critical - Access bypass - SA-CONTRIB-2026-237EPSS 0.2%CVE-2026-87955MEDIUMUltimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153EPSS 0.2%CVE-2026-118564MEDIUMPayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-277EPSS 0.2%CVE-2026-118563MEDIUMCacheFlush - Critical - Unsupported - SA-CONTRIB-2026-276EPSS 0.2%CVE-2026-96363LOWWebform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161EPSS 0.2%CVE-2024-13305MEDIUMEntity Form Steps - Moderately critical - Cross site scripting - SA-CONTRIB-2024-071EPSS 0.2%