https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:51:23.502324+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-111 DRUPAL-CONTRIB-2025-111 2026-10-07T07:51:23.564416+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/reverse_proxy_header

This module allows you to specify an HTTP header name to determine the client's IP address.

The module doesn't sufficiently handle all cases under the scenario if Drupal Core settings `$settings['reverse_proxy']` is set to TRUE and `$settings['reverse_proxy_addresses']` is configured.

This vulnerability allows an attacker to spoof a request IP address (as Drupal sees it), potentially bypassing a variety of controls.

 https://cve.radiocsirt.org/vuln/euvd-2026-257172 EUVD-2026-257172 2026-10-07T07:51:23.564477+00:00 EUVD-2026-257172 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10929 fkie_cve-2025-10929 2026-10-07T07:51:23.564493+00:00

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables.This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

 https://cve.radiocsirt.org/vuln/ghsa-fg8x-q69g-4qp3 GHSA-fg8x-q69g-4qp3 — Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables 2026-10-07T07:51:23.564516+00:00

Affected: Packagist: drupal/reverse_proxy_header

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2126 WID-SEC-W-2025-2126 — Drupal Module: Mehrere Schwachstellen 2026-10-07T07:51:23.564536+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal Module ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um falsche Informationen darzustellen.