Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownThe Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting (XSS) vulnerability.Oct 14, 2026
- UnknownThe Drupal core Link module provides a field type that can be used for internal and external URLs.Oct 14, 2026
- UnknownA remote code execution vulnerability exists within the Field UI module in Drupal core.Oct 14, 2026
- Medium5.3Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabledEPSS 0.3%Oct 9, 2026
- Medium5.3Contao: The registration module re-sends activation mailsEPSS 0.3%Oct 9, 2026
- Low3.5Contao: Cross-site request forgery in custom backend actionsEPSS 0.1%Oct 9, 2026
- Medium5.3Contao: Path traversal in the images controllerEPSS 0.3%Oct 9, 2026
- Critical9.3Contao: Cross-site scripting in the comments bundleEPSS 0.3%Oct 9, 2026
- Medium4.3Contao: Improper access control in the preview links moduleEPSS 0.2%Oct 9, 2026
- Medium4.3Contao: Improper access control in the table access voterEPSS 0.2%Oct 9, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026
11 records · page 1 of 1
PreviousNext