Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
Affects drupal/core | Versions >=8.0.0, <10.4.9>=10.5.0, <10.5.6>=11.0.0, <11.1.9>=11.2.0, <11.2.8
Has fix
ComposerPublished 20 Nov 2025
- L
Affects drupal/core | Versions >=8.0.0, <10.4.9>=10.5.0, <10.5.6>=11.0.0, <11.1.9>=11.2.0, <11.2.8
Has fix
ComposerPublished 20 Nov 2025
- H
Deserialization of Untrusted DataCVE-2025-13081
Affects drupal/core | Versions >=8.0.0, <10.4.9>=10.5.0, <10.5.6>=11.0.0, <11.1.9>=11.2.0, <11.2.8
Has fix
ComposerPublished 20 Nov 2025
- M
Improper Check for Unusual or Exceptional ConditionsCVE-2025-13080
Affects drupal/core | Versions >=8.0.0, <10.4.9>=10.5.0, <10.5.6>=11.0.0, <11.1.9>=11.2.0, <11.2.8
Has fix
ComposerPublished 20 Nov 2025
- M
Incorrect AuthorizationCVE-2025-31673
Affects drupal/core | Versions <10.3.13>=10.4.0, <10.4.3>=11.0.0, <11.0.12>=11.1.0, <11.1.3
Has fix
ComposerPublished 6 Apr 2025
- M
Cross-site Scripting (XSS)CVE-2025-31675
Affects drupal/core | Versions <10.3.14>=10.4.0, <10.4.5>=11.0.0, <11.0.13>=11.1.0, <11.1.5
Has fix
ComposerPublished 6 Apr 2025
Affects drupal/core | Versions <10.3.13>=10.4.0, <10.4.3>=11.0.0, <11.0.12>=11.1.0, <11.1.3
Has fix
ComposerPublished 6 Apr 2025
- M
Cross-site Scripting (XSS)CVE-2025-3057
Affects drupal/core | Versions <10.3.13>=10.4.0, <10.4.3>=11.0.0, <11.0.12>=11.1.0, <11.1.3
Has fix
ComposerPublished 6 Apr 2025
Affects drupal/core | Versions >=8.8.0, <10.2.11>=10.3.0, <10.3.9
Has fix
ComposerPublished 10 Dec 2024
Affects drupal/core | Versions >=8.8.0, <10.2.11>=10.3.0, <10.3.9>=11.0.0, <11.0.8
Has fix
ComposerPublished 10 Dec 2024
Affects drupal/core | Versions >=8.8.0, <10.2.11>=10.3.0, <10.3.9>=11.0.0, <11.0.8
Has fix
ComposerPublished 10 Dec 2024
- H
Improper Handling of Case SensitivityCVE-2024-55634
Affects drupal/core | Versions >=8.8.0, <10.2.11>=10.3.0, <10.3.9>=11.0.0, <11.0.8
Has fix
ComposerPublished 10 Dec 2024
- M
Cross-site Scripting (XSS)CVE-2024-12393
Affects drupal/core | Versions >=8.8.0, <10.2.11>=10.3.0, <10.3.9>=11.0.0, <11.0.8
Has fix
ComposerPublished 10 Dec 2024
- H
Infinite loopCVE-2024-11941
Affects drupal/core | Versions >=10.1.0, <10.1.8>=10.2.0, <10.2.2
Has fix
ComposerPublished 6 Dec 2024
- H
Detection of Error Condition Without ActionCVE-2024-11942
Affects drupal/core | Versions >=10.0.0, <10.2.10
Has fix
ComposerPublished 6 Dec 2024
- M
Information ExposureCVE-2024-45440
Affects drupal/core | Versions >=8.0.0, <10.2.9>=10.3.0, <10.3.6>=11.0.0, <11.0.5
Has fix
ComposerPublished 30 Aug 2024
Affects drupal/core | Versions >=10.1.0, <10.1.8>=10.2.0, <10.2.2
Has fix
ComposerPublished 26 Apr 2024
- M
Cross-site Scripting (XSS)CVE-2020-13688
Affects drupal/core | Versions <8.8.10>=8.9.0, <8.9.6>=9.0.0, <9.0.6
Has fix
ComposerPublished 24 Apr 2024
- M
URL Redirection to Untrusted Site ('Open Redirect')CVE-2016-9451
Affects drupal/core | Versions <8.2.3
Has fix
ComposerPublished 24 Apr 2024
Affects drupal/core | Versions <10.0.0
Has fix
ComposerPublished 16 Jan 2024
- M
Information ExposureCVE-2023-5256
Affects drupal/core | Versions >=8.7.0, <9.5.11>=10.0.0, <10.0.11>=10.1.0, <10.1.4
Has fix
ComposerPublished 29 Sept 2023
- M
Access Control BypassCVE-2023-31250
Affects drupal/core | Versions >=7.0.0, <7.96>=9.4, <9.4.14>=9.5, <9.5.8>=10.0, <10.0.8
Has fix
ComposerPublished 27 Apr 2023
- M
Cross-site Scripting (XSS)CVE-2022-25276
Affects drupal/core | Versions >=8.0.0, <9.3.19>=9.4.0, <9.4.3
Has fix
ComposerPublished 27 Apr 2023
- M
Access Restriction BypassCVE-2022-25278
Affects drupal/core | Versions >=8.0.0, <9.3.19>=9.4.0, <9.4.3
Has fix
ComposerPublished 23 Apr 2023
- H
Arbitrary Code ExecutionCVE-2022-25277
Affects drupal/core | Versions <9.3.19>=9.4.0, <9.4.3
Has fix
ComposerPublished 26 Jul 2022
- M
Information ExposureCVE-2022-25275
Affects drupal/core | Versions <9.3.19>=9.4.0, <9.4.3
Has fix
ComposerPublished 26 Jul 2022
- M
Access Control BypassCVE-2022-25274
Affects drupal/core | Versions >=9.3.0, <9.3.12
Has fix
ComposerPublished 27 Apr 2022
- H
Improper Input ValidationCVE-2022-25273
Affects drupal/core | Versions >=8.0.0, <9.2.18>=9.3.0, <9.3.12
Has fix
ComposerPublished 27 Apr 2022
- M
Improper Input ValidationCVE-2022-25271
Affects drupal/core | Versions <9.2.13>=9.3.0, <9.3.6
Has fix
ComposerPublished 17 Feb 2022
- M
Access Restriction BypassCVE-2022-25270
Affects drupal/core | Versions <9.2.13>=9.3.0, <9.3.6
Has fix
ComposerPublished 17 Feb 2022