Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 779
Reset filtersdrupal/cas_server - SA-CONTRIB-2026-007
drupal/canvas - SA-CONTRIB-2026-006
drupal/social_auth_entra_id - SA-CONTRIB-2026-005
drupal/pianoanalytics - SA-CONTRIB-2026-004
drupal/atsmarttag - SA-CONTRIB-2026-003
drupal/role_delegation - SA-CONTRIB-2026-002
drupal/ginvite - SA-CONTRIB-2026-001
drupal/http_client_manager - SA-CONTRIB-2025-126
drupal/acquia_contenthub - SA-CONTRIB-2025-125
drupal/disable_login - SA-CONTRIB-2025-124
drupal/entity_share - SA-CONTRIB-2025-123
drupal/next - SA-CONTRIB-2025-122
drupal/tagify - SA-CONTRIB-2025-121
drupal/login_time_restriction - SA-CONTRIB-2025-120
drupal/ai - SA-CONTRIB-2025-119
drupal/ckeditor5_premium_features - SA-CONTRIB-2025-118
drupal/minisite - SA-CONTRIB-2025-117
drupal/simple_multistep - SA-CONTRIB-2025-116
drupal/email_tfa - SA-CONTRIB-2025-115
Drupal core allows Exploiting Incorrectly Configured Access Control Security Levels
Drupal core allows Content Spoofing
Drupal core allows Object Injection
Drupal core allows Forceful Browsing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.