https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:38:48.764166+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-drupal-2023-5256 BIT-drupal-2023-5256 — Drupal core - Critical - Cache poisoning - SA-CORE-2023-006 2026-10-15T22:38:48.768199+00:00

Affected: Bitnami: drupal

In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.

This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.

The core REST and contributed GraphQL modules are not affected.

 https://cve.radiocsirt.org/vuln/euvd-2026-187246 EUVD-2026-187246 2026-10-15T22:38:48.768247+00:00 EUVD-2026-187246 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5256 fkie_cve-2023-5256 2026-10-15T22:38:48.768263+00:00

In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.

This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.

The core REST and contributed GraphQL modules are not affected.

 https://cve.radiocsirt.org/vuln/ghsa-rjqg-3h9m-fx5x GHSA-rjqg-3h9m-fx5x — Cache poisoning in drupal/core 2026-10-15T22:38:48.768288+00:00

Affected: Packagist: drupal/core

In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.

This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.

The core REST and contributed GraphQL modules are not affected.

 https://cve.radiocsirt.org/vuln/gsd-2023-5256 gsd-2023-5256 2026-10-15T22:38:48.768312+00:00 gsd-2023-5256 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-5256 UBUNTU-CVE-2023-5256 2026-10-15T22:38:48.768324+00:00

Affected: Ubuntu:Pro:14.04:LTS: drupal7, Ubuntu:Pro:16.04:LTS: drupal7

In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation. This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API. The core REST and contributed GraphQL modules are not affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2410 WID-SEC-W-2023-2410 — Drupal: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-15T22:38:48.768346+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Drupal ausnutzen, um Informationen offenzulegen.