All products

drupal/core

Composer · Package
147 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
DRUPAL-CORE-2026-016CVE-2026-108514 · DRUPAL-CORE-2026-016 drupal/core Composer Unknown Fix reported
DRUPAL-CORE-2026-014CVE-2026-108097 · DRUPAL-CORE-2026-014 drupal/core Composer Unknown Fix reported
DRUPAL-CORE-2026-015CVE-2026-108515 · DRUPAL-CORE-2026-015 drupal/core Composer Unknown Fix reported
Arbitrary PHP code execution in DrupalCVE-2019-6339 · DRUPAL-CORE-2019-002Version ranges need review. drupal/coredrupal/drupal Composer Critical Fix reported
Drupal core third-party PEAR Archive_Tar library is vulnerable to Deserialization of Untrusted DataCVE-2019-6338 · DRUPAL-CORE-2019-001Version ranges need review. drupal/coredrupal/drupal Composer High Fix reported
Drupal Core Remote Code Execution VulnerabilityCVE-2019-6340 · DRUPAL-CORE-2019-003Version ranges need review. drupal/coredrupal/drupal Composer High Fix reported
Drupal Cross Site Scripting (XSS) vulnerabilityCVE-2019-6341 · DRUPAL-CORE-2019-004Version ranges need review. drupal/coredrupal/drupal Composer Medium Fix reported
DRUPAL-CORE-2019-005DRUPAL-CORE-2019-005 drupal/core Composer Unknown Fix reported
XSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358 · DRUPAL-CORE-2019-006Version ranges need review. drupal/coremaximebf/debugbar ComposerMavennpmNuGetPyPIRed HatRubyGems Medium Fix reported
Directory Traversal in typo3/phar-stream-wrapperCVE-2019-11831 · DRUPAL-CORE-2019-007Version ranges need review. drupal/coredrupal/drupal Composer Critical Fix reported
Drupal Improper Access ControlCVE-2019-6342 · DRUPAL-CORE-2019-008Version ranges need review. drupal/coredrupal/drupal Composer Critical Fix reported
DRUPAL-CORE-2019-009DRUPAL-CORE-2019-009 drupal/core Composer Unknown Fix reported
DRUPAL-CORE-2019-010DRUPAL-CORE-2019-010 drupal/core Composer Unknown Fix reported
DRUPAL-CORE-2019-011DRUPAL-CORE-2019-011 drupal/core Composer Unknown Fix reported
DRUPAL-CORE-2019-012DRUPAL-CORE-2019-012 drupal/core Composer Unknown Fix reported
DRUPAL-CORE-2020-001DRUPAL-CORE-2020-001 drupal/core Composer Unknown Fix reported
DRUPAL-CORE-2020-002DRUPAL-CORE-2020-002 drupal/core Composer Unknown Fix reported
Drupal Core Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2020-13663 · DRUPAL-CORE-2020-004Version ranges need review. drupal/coredrupal/drupal Composer High Fix reported
Drupal Core Arbitrary PHP code execution vulnerabilityCVE-2020-13664 · DRUPAL-CORE-2020-005Version ranges need review. drupal/coredrupal/drupal Composer High Fix reported
DRUPAL-CORE-2020-006DRUPAL-CORE-2020-006 drupal/core Composer Unknown Fix reported