https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:33:53.904660+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-066 DRUPAL-CONTRIB-2026-066 2026-10-04T09:33:53.907868+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/canvas

The Canvas module allow you to upload image files via a custom API.

The validation rules check the file extension of the uploaded file but not the file MIME type. This may allow a malicious user to upload a file that is not an image.

Certain web-server configurations may serve the uploaded file with its actual MIME type rather than an image type. This may lead to cross-site scripting (XSS) or other unexpected behavior.

 https://cve.radiocsirt.org/vuln/euvd-2026-336002 EUVD-2026-336002 2026-10-04T09:33:53.907918+00:00 EUVD-2026-336002 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58588 fkie_cve-2026-58588 2026-10-04T09:33:53.907935+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.

 https://cve.radiocsirt.org/vuln/ghsa-4jgx-vqf2-p9g9 GHSA-4jgx-vqf2-p9g9 2026-10-04T09:33:53.907958+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2181 WID-SEC-W-2026-2181 — Drupal Extensions: Mehrere Schwachstellen 2026-10-04T09:33:53.907974+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.