Most recent entries from all

DRUPAL-CONTRIB-2026-044

Affected: Packagist:https://packages.drupal.org/8: drupal/examples

The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.

The "Read from a file" feature implemented by the file\_example submodule can be used to expose any file that PHP can access. Therefore, the file\_example sub-module is being removed from Examples for Developers until a version demonstrating file security best practices can be added back in the future. Developers who based a new module on this example should review their code for an access bypass.

EUVD-2026-336114

fkie_cve-2026-11909

Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6.

GHSA-q6w5-4q59-rj5q

Missing Authorization vulnerability in Drupal Examples for Developers allows Forceful Browsing. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.6.

WID-SEC-W-2026-1882 — Drupal: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und weitere, nicht spezifizierte Auswirkungen zu verursachen.