drupal/core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2017-6932Mediumdrupal/core: Drupal external link injection vulnerability CVE-2017-6927Mediumdrupal/core: Drupal cross-site scripting vulnerability CVE-2017-6926Highdrupal/core: Drupal Comment reply form allows access to restricted content CVE-2017-6920Criticaldrupal/core: Drupal PECL YAML parser unsafe object handling CVE-2018-7600Criticaldrupal/core: Drupal Core Remote Code Execution Vulnerability CVE-2018-9861Mediumdrupal/core: Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)CVE-2017-6919Highdrupal/core: Drupal access control bypass vulnerability CVE-2017-6931Mediumdrupal/core: Drupal Settings Tray access bypass CVE-2017-6928Mediumdrupal/core: Drupal access bypass vulnerability CVE-2017-6925Criticaldrupal/core: Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions CVE-2017-6930Highdrupal/core: Drupal access bypass vulnerability CVE-2017-6381Highdrupal/core: Drupal Remote code execution CVE-2017-6377Highdrupal/core: Drupal editor module incorrectly checks access to inline private files CVE-2017-6924Highdrupal/core: Drupal REST API can bypass comment approval CVE-2017-6921Mediumdrupal/core: Drupal file REST resource does not properly validate CVE-2017-6922Mediumdrupal/core: Drupal core access bypass vulnerability CVE-2019-6340Highdrupal/core: Drupal Core Remote Code Execution Vulnerability CVE-2011-2715Criticaldrupal/core: Drupal SQL Injection vulnerability CVE-2011-2714Mediumdrupal/core: Drupal Cross-Site Scripting vulnerability CVE-2016-5385Highguzzlehttp/guzzle: HTTP Proxy header vulnerability CVE-2022-25271Highdrupal/core: Improper input validation in Drupal core CVE-2022-25270Mediumdrupal/core: Incorrect authorization in Drupal core CVE-2020-13669Mediumdrupal/core: Drupal core Cross-site Scripting (XSS) vulnerability in ckeditor CVE-2020-13668Mediumdrupal/core: Cross-site Scripting in Drupal Core CVE-2020-13670Highdrupal/core: Exposure of Resource to Wrong Sphere in Drupal Core

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo