Drupal vulnerabilities
Every vulnerability this feed holds for Drupal, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
2 vulnerabilities tracked.
- 6.5 Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing.
- 5.3 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Drupal is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Google Red Hat Microsoft Apple zephyrproject Apache Software Foundation n/a Hewlett Packard Enterprise (HPE) MediaTek, Inc. Linux Eclipse Foundation Tanium Unknown FreeRDP IBM Dell Oracle Corporation MONGODB Gitea WAVLINK vercel vim Hitachi jpadilla