https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:37:14.962540+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-035 DRUPAL-CONTRIB-2025-035 2026-10-16T14:37:14.965548+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/stage_file_proxy

Stage File Proxy is a general solution for getting production files on a development server on demand.

The module doesn't sufficiently validate the existence of remote files prior to attempting to download and create them. An attacker could send many requests and exhaust disk resources.

This vulnerability is mitigated by the fact it only affects sites where the Origin is configured with a trailing slash. Sites that cannot upgrade immediately can confirm they do not have a trailing slash or remove the trailing slash to mitigate the issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-231110 EUVD-2026-231110 2026-10-16T14:37:14.965603+00:00 EUVD-2026-231110 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3734 fkie_cve-2025-3734 2026-10-16T14:37:14.965620+00:00

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5.

 https://cve.radiocsirt.org/vuln/ghsa-6p94-34xm-5x7f GHSA-6p94-34xm-5x7f 2026-10-16T14:37:14.965641+00:00

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0847 WID-SEC-W-2025-0847 — Drupal Plugins Mehrere Schwachstellen 2026-10-16T14:37:14.965656+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial of Service auszuführen oder nicht spezifizierte Angriffe durchzuführen.