https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T12:39:19.151893+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-008 DRUPAL-CONTRIB-2025-008 2026-10-17T12:39:19.171821+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/matomo

This module enables you to add the Matomo web statistics tracking system to your website.

The Matomo Analytics Tag Manager sub-module allows you to add one or more Matomo tag containers on your website.

The module does not protect against Cross Site Request Forgeries on routes to enable or disable containers.

This vulnerability is mitigated by the fact that:

* The website needs to have the submodule "Matomo Analytics Tag Manager" enabled. * An attacker must know the machine name of the container.

 https://cve.radiocsirt.org/vuln/euvd-2026-235686 EUVD-2026-235686 2026-10-17T12:39:19.171896+00:00 EUVD-2026-235686 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31680 fkie_cve-2025-31680 2026-10-17T12:39:19.171917+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Matomo Analytics allows Cross Site Request Forgery.This issue affects Matomo Analytics: from 0.0.0 before 1.24.0.

 https://cve.radiocsirt.org/vuln/ghsa-jh66-rjx8-8qqc GHSA-jh66-rjx8-8qqc — Drupal Matomo Analytics Cross-Site Request Forgery (CSRF) vulnerability 2026-10-17T12:39:19.171950+00:00

Affected: Packagist: drupal/matomo

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Matomo Analytics allows Cross Site Request Forgery. This issue affects Matomo Analytics: from 0.0.0 before 1.24.0.