https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:26:06.631402+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-033 DRUPAL-CONTRIB-2026-033 2026-10-08T18:26:06.634528+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/obfuscate

This module enables you to obfuscate email addresses in content.

The module doesn't sufficiently sanitize user input via the Twig filter.

This vulnerability is mitigated by the fact that it only affects sites using the ROT13 encoding and where an attacker can enter content that is filtered using the module's Twig filter.

 https://cve.radiocsirt.org/vuln/euvd-2026-319620 EUVD-2026-319620 2026-10-08T18:26:06.634576+00:00 EUVD-2026-319620 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6871 fkie_cve-2026-6871 2026-10-08T18:26:06.634592+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS).

This issue affects Obfuscate: from 0.0.0 before 2.0.2.

 https://cve.radiocsirt.org/vuln/ghsa-rg7p-g694-c73p GHSA-rg7p-g694-c73p 2026-10-08T18:26:06.634614+00:00

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS).

This issue affects Obfuscate: from 0.0.0 before 2.0.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1248 WID-SEC-W-2026-1248 — Drupal (Obfuscate): Schwachstelle ermöglicht Cross-Site Scripting 2026-10-08T18:26:06.634629+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.