Most recent entries from all

DRUPAL-CONTRIB-2025-018

Affected: Packagist:https://packages.drupal.org/8: drupal/gdpr

The GDPR Task submodule enables you to create GDPR tasks.

The module doesn't sufficiently protect against Cross Site Request Forgery (CSRF) attacks by validating user identity and intent when creating tasks.

EUVD-2026-235671

fkie_cve-2025-31689

Cross-Site Request Forgery (CSRF) vulnerability in Drupal General Data Protection Regulation allows Cross Site Request Forgery.This issue affects General Data Protection Regulation: from 0.0.0 before 3.0.1, from 3.1.0 before 3.1.2.

GHSA-jv6r-mj9p-9xff — Drupal General Data Protection Regulation Cross-Site Request Forgery (CSRF) vulnerability

Affected: Packagist: drupal/gdpr

Cross-Site Request Forgery (CSRF) vulnerability in Drupal General Data Protection Regulation allows Cross Site Request Forgery. This issue affects General Data Protection Regulation: from 0.0.0 before 3.0.1, from 3.1.0 before 3.1.2.