Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 404
Reset filtersdrupal/theme_rule - SA-CONTRIB-2026-012
drupal/quickedit - SA-CONTRIB-2026-009
drupal/social_auth_entra_id - SA-CONTRIB-2026-005
drupal/role_delegation - SA-CONTRIB-2026-002
drupal/ginvite - SA-CONTRIB-2026-001
drupal/http_client_manager - SA-CONTRIB-2025-126
drupal/tagify - SA-CONTRIB-2025-121
drupal/ai - SA-CONTRIB-2025-119
drupal/minisite - SA-CONTRIB-2025-117
drupal/simple_multistep - SA-CONTRIB-2025-116
drupal/email_tfa - SA-CONTRIB-2025-115
Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels
drupal/civictheme - SA-CONTRIB-2025-113
drupal/civictheme - SA-CONTRIB-2025-112
drupal/plausible_tracking - SA-CONTRIB-2025-107
drupal/owlcarousel2 - SA-CONTRIB-2025-104
drupal/api_key_manager - SA-CONTRIB-2025-103
drupal/sync_composer_with_contrib - SA-CONTRIB-2025-102
drupal/facets - SA-CONTRIB-2025-100
drupal/layout_builder_perms - SA-CONTRIB-2025-097
drupal/ai_seo_link_advisor - SA-CONTRIB-2025-095
drupal/gtm - SA-CONTRIB-2025-094
drupal/cookies - SA-CONTRIB-2025-092
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.