Most recent entries from all

bdu:2025-00848

DRUPAL-CONTRIB-2024-030

Affected: Packagist:https://packages.drupal.org/8: drupal/responsive_menu

This module integrates the mmenu library with Drupal's menu system with the aim of having an off-canvas mobile menu and a horizontal menu at wider widths.

The module doesn't respect custom node access restrictions implemented through hook\_ENTITY\_TYPE\_access hooks meaning the titles of restricted nodes can appear in the menu.

Only sites with modules that implement hook\_ENTITY\_TYPE\_access to restrict access to nodes are effected.

EUVD-2026-210454

fkie_cve-2024-13266

Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4.

GHSA-m8j3-m4jx-2rhw

Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4.

WID-SEC-W-2024-1900 — Drupal Module: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Modulen ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um beliebigen Code auszuführen oder einen Cross-Site-Scripting-Angriff durchzuführen.