drupal/core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-MH4H-27GQ-CXWJMediumdrupal/core: Drupal core Access bypass GHSA-7GWJ-7FHM-VW4WMediumdrupal/core: Drupal core unrestricted file upload GHSA-PR99-C33P-FWF6Mediumdrupal/core: Drupal core Denial of Service GHSA-7V68-3PR5-H3CRCriticaldrupal/core: Drupal Core Insufficient Contextual Links validation leads to Remote Code Execution GHSA-6MGP-V5CM-GHG5Criticaldrupal/core: Drupal core Remote Code Execution GHSA-GFVF-2F25-F34RMediumdrupal/core: Drupal Anonymous Open Redirect GHSA-7F4F-P7MQ-P4FVMediumdrupal/core: Drupal External URL injection through URL aliases leading to Open Redirect GHSA-F84Q-MGJ9-8JFCMediumdrupal/core: Drupal Content moderation Access bypass CVE-2018-7602Criticaldrupal/core: Drupal Core Remote Code Execution Vulnerability GHSA-6CCV-8FGF-CJPWMediumdrupal/core: Drupal core Denial of Service vulnerability CVE-2024-22362Mediumdrupal/core: Drupal Denial of Service vulnerability CVE-2019-6342Criticaldrupal/core: Drupal Improper Access Control CVE-2023-5256Criticaldrupal/core: Cache poisoning in drupal/core CVE-2023-31250Criticaldrupal/core: Access bypass in Drupal core CVE-2022-25273Highdrupal/core: Improper input validation in Drupal core CVE-2022-25274Mediumdrupal/core: Access bypass in Drupal core CVE-2022-25276Mediumdrupal/core: Lack of domain validation in Druple core CVE-2022-25278Mediumdrupal/core: Access bypass in Drupal Core CVE-2022-25277Highdrupal/core: Drupal core arbitrary PHP code execution CVE-2022-25275Highdrupal/core: Drupal core Information Disclosure vulnerability CVE-2020-13688Mediumdrupal/core: Drupal Core Cross-site scripting vulnerability CVE-2020-13663Highdrupal/core: Drupal Core Cross-Site Request Forgery (CSRF) vulnerability CVE-2020-13667Mediumdrupal/core: Drupal Core Access bypass vulnerability CVE-2020-13665Criticaldrupal/core: Drupal Core Access bypass vulnerability CVE-2020-13664Highdrupal/core: Drupal Core Arbitrary PHP code execution vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo