https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:16:35 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2026-088 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/photoswipe</p> <p>The Photoswipe Drupal module provides integration for the widely used [PhotoSwipe lightbox library](https://photoswipe.com/) to display / zoom images in lightbox galleries using the provided image formatters.</p> <p>The module didn&#39;t sufficiently check access permissions, when viewing an image using the photoswipe image gallery display formatter, in versions &lt; 3.0.4 (Drupal 8) or &lt; 3.2.0 (Drupal 9 / Drupal 10).</p> <p>This vulnerability is mitigated by the fact that it only affects sites limiting access to the images shown in photoswipe (the most common use case for photoswipe lightboxes public images).</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/photoswipe</p> <p>The Photoswipe Drupal module provides integration for the widely used [PhotoSwipe lightbox library](https://photoswipe.com/) to display / zoom images in lightbox galleries using the provided image formatters.</p> <p>The module didn&#39;t sufficiently check access permissions, when viewing an image using the photoswipe image gallery display formatter, in versions &lt; 3.0.4 (Drupal 8) or &lt; 3.2.0 (Drupal 9 / Drupal 10).</p> <p>This vulnerability is mitigated by the fact that it only affects sites limiting access to the images shown in photoswipe (the most common use case for photoswipe lightboxes public images).</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2026-088 https://cve.radiocsirt.org/vuln/euvd-2026-359509 EUVD-2026-359509 https://cve.radiocsirt.org/vuln/euvd-2026-359509 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16645 <p>Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.</p> <p>Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16645 https://cve.radiocsirt.org/vuln/ghsa-wq7x-7x4j-792v <p>Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.</p> <p>Missing Authorization vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Forceful Browsing. This issue affects PhotoSwipe - Responsive JavaScript Modal Image Gallery versions: from 0.0.0 to 3.2.0.</p> https://cve.radiocsirt.org/vuln/ghsa-wq7x-7x4j-792v https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2474 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und weitere, nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und weitere, nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2474