Open Source Vulnerabilities

Views Share - Moderately critical - Access bypass - SA-CONTRIB-2026-205

Xray Audit - Moderately critical - Access bypass - SA-CONTRIB-2026-206

Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207

DKAN - Moderately critical - Access bypass - SA-CONTRIB-2026-208

SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210

Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211

Easy Breadcrumb - Moderately critical - Information disclosure - SA-CONTRIB-2026-212

Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2026-213

Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214

Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215

Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216

Advanced Filesystem - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-217

Drupal core - Critical - Remote code execution - SA-CORE-2026-014

Gin Admin Theme - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-219

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016

Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218

Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220

UI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221

Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222

Black Hole - Critical - Cross-site scripting - SA-CONTRIB-2026-223

ABC - Critical - Cross-site scripting - SA-CONTRIB-2026-224

Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225

CSV Field - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-226

Dopup - Critical - Information disclosure - SA-CONTRIB-2026-227

Swiper formatter - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-228

Sector Distribution - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-229

UI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230

Ágora Transparency Theme - Moderately critical - Information disclosure - SA-CONTRIB-2026-231

Block Attributes - Moderately critical - Cross site Scripting - SA-CONTRIB-2026-232

Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233

USWDS Paragraph Components - Moderately critical - Cross site scripting - SA-CONTRIB-2026-234

Domain - Moderately critical - Access bypass - SA-CONTRIB-2026-238

Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240

Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241

Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242

Media Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243

Fullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244

Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246

ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247

Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250

AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251

Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253

Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254

Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255

Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256

Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257

Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258

Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259