Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 789
Reset filtersDrupal Core has a SQL Injection issue
drupal/date_ical - SA-CONTRIB-2026-037
drupal/colorbox_inline - SA-CONTRIB-2026-036
drupal/gtranslate - SA-CONTRIB-2026-035
drupal/node_view_permissions - SA-CONTRIB-2026-034
drupal/obfuscate - SA-CONTRIB-2026-033
Drupal core allows Cross-Site Scripting (XSS)
Drupal core allows Object Injection
Drupal core is Vulnerable to Cross-Site Scripting
drupal/orejime - SA-CONTRIB-2026-032
drupal/miniorange_saml - SA-CONTRIB-2026-031
drupal/autologout - SA-CONTRIB-2026-030
drupal/unpublished_node_permissions - SA-CONTRIB-2026-029
drupal/ai - SA-CONTRIB-2026-028
drupal/openid_connect - SA-CONTRIB-2026-027
drupal/openid_connect - SA-CONTRIB-2026-026
drupal/openid_connect - SA-CONTRIB-2026-025
drupal/ga4_google_analytics - SA-CONTRIB-2026-024
drupal/calculation_fields - SA-CONTRIB-2026-023
drupal/ajax_dashboard - SA-CONTRIB-2026-022
drupal/file_access_fix - SA-CONTRIB-2026-021
drupal/file_access_fix - SA-CONTRIB-2026-020
drupal/responsive_favicons - SA-CONTRIB-2026-019
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.