https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T12:18:54.205369+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-drupal-2020-13677 BIT-drupal-2020-13677 2026-10-15T12:18:54.209802+00:00

Affected: Bitnami: drupal

Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass. Sites that do not have the JSON:API module enabled are not affected.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-712 certfr-2021-avi-712 — De multiples vulnérabilités ont été découvertes dans Drupal Core. Certaines d'entre elles permettent à un attaquant de… 2026-10-15T12:18:54.209848+00:00 certfr-2021-avi-712 https://cve.radiocsirt.org/vuln/euvd-2026-41996 EUVD-2026-41996 2026-10-15T12:18:54.209868+00:00 EUVD-2026-41996 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13677 fkie_cve-2020-13677 2026-10-15T12:18:54.209881+00:00

Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass. Sites that do not have the JSON:API module enabled are not affected.

 https://cve.radiocsirt.org/vuln/ghsa-3xr3-phjp-g6p2 GHSA-3xr3-phjp-g6p2 — Drupal core access bypass vulnerability 2026-10-15T12:18:54.209900+00:00

Affected: Packagist: drupal/core

Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass. Sites that do not have the JSON:API module enabled are not affected.

 https://cve.radiocsirt.org/vuln/gsd-2020-13677 gsd-2020-13677 2026-10-15T12:18:54.209920+00:00 gsd-2020-13677 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13677 Withdrawn: UBUNTU-CVE-2020-13677 2026-10-15T12:18:54.209931+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: drupal7

Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass. Sites that do not have the JSON:API module enabled are not affected.