OSV - Open Source Vulnerabilities

DRUPAL-CONTRIB-2026-079

Packagist:https://packages.drupal.org/8/drupal/commerce_guest_registration

See record for full details

3 hours ago

No fix available

DRUPAL-CONTRIB-2026-078

Packagist:https://packages.drupal.org/8/drupal/clean_node_api

See record for full details

3 hours ago

No fix available

DRUPAL-CONTRIB-2026-077

Packagist:https://packages.drupal.org/8/drupal/raw_formatter

See record for full details

3 hours ago

No fix available

DRUPAL-CONTRIB-2026-076

Packagist:https://packages.drupal.org/8/drupal/ai_seo

See record for full details

3 hours ago

Fix available

DRUPAL-CONTRIB-2026-075

Packagist:https://packages.drupal.org/8/drupal/ui_patterns

See record for full details

3 hours ago

Fix available

DRUPAL-CONTRIB-2026-074

Packagist:https://packages.drupal.org/8/drupal/eca

See record for full details

3 hours ago

Fix available

DRUPAL-CONTRIB-2026-073

Packagist:https://packages.drupal.org/8/drupal/siteimprove_analytics

See record for full details

3 hours ago

Fix available

DRUPAL-CONTRIB-2026-072

Packagist:https://packages.drupal.org/8/drupal/location_selector

See record for full details

3 hours ago

Fix available

DRUPAL-CONTRIB-2026-071

Packagist:https://packages.drupal.org/8/drupal/lingotek

See record for full details

3 hours ago

Fix available

DRUPAL-CONTRIB-2026-070

Packagist:https://packages.drupal.org/8/drupal/login_disable

See record for full details

3 hours ago

Fix available

GHSA-gq4g-fpc9-vjfq

Packagist/web-auth/webauthn-lib

Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection

20 hours ago

Fix available
Severity - 2.9 (Low)

GHSA-c8m7-r2jv-rw63

Packagist/egroupware/egroupware

EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose

yesterday

Fix available
Severity - 6.5 (Medium)

GHSA-8737-2x9g-xjj7

Packagist/egroupware/egroupware

EGroupware has Authenticated RCE via Malicious eTemplate Upload

yesterday

Fix available
Severity - 8.6 (High)

GHSA-h9qx-v5xp-ph8p

Packagist/egroupware/egroupware

EGroupware has a Remote Code Execution Vulnerability

yesterday

Fix available
Severity - 9.3 (Critical)

GHSA-f74w-488g-8x5r

Packagist/craftcms/cms

Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

yesterday

Fix available
Severity - 8.7 (High)

GHSA-xrqc-p465-2xvg

Packagist/craftcms/cms

Craft CMS: Stored XSS via Structure entry title in table view

yesterday

Fix available
Severity - 5.9 (Medium)