Drupal Core
Approved changes feed: RSS · Atom
cpe:2.3:a:drupal:drupal_core:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Drupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de) |
|---|---|
| Product | Drupal Core (20455569-20eb-50db-af25-1cdebfdd1083) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-108514 |
vulnerable | 2026-11-03 10:18:02.223934 |
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 10.3.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.
Published: 2026-10-30T03:09:51.346Z
Updated: 2026-11-06T16:02:54.198Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-108515 |
vulnerable | 2026-11-03 10:18:01.374054 |
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.
Published: 2026-10-30T03:09:52.573Z
Updated: 2026-11-06T16:04:08.817Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-108097 |
vulnerable | 2026-11-03 10:18:01.154637 |
Drupal core - Critical - Remote code execution - SA-CORE-2026-014
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.
Published: 2026-10-30T03:09:55.043Z
Updated: 2026-11-06T16:05:59.537Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55808 |
vulnerable | 2026-07-29 01:00:28.637628 |
Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS). This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.
Published: 2026-07-10T21:46:43.600Z
Updated: 2026-07-13T18:18:56.714Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55807 |
vulnerable | 2026-07-29 01:00:28.637442 |
Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008
Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal core allows Server Side Request Forgery. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.
Published: 2026-07-10T21:46:40.786Z
Updated: 2026-07-13T18:20:30.331Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55806 |
vulnerable | 2026-07-29 01:00:28.637140 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55804 |
vulnerable | 2026-07-29 01:00:28.636860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55803 |
vulnerable | 2026-07-29 01:00:28.636609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9082 |
vulnerable | 2026-06-08 08:08:58.828600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6367 |
vulnerable | 2026-06-08 08:07:04.708250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6366 |
vulnerable | 2026-06-08 08:07:04.707977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6365 |
vulnerable | 2026-06-08 08:07:04.707640 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3057 |
vulnerable | 2026-06-08 07:23:07.922417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31675 |
vulnerable | 2026-06-08 07:18:58.350161 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31674 |
vulnerable | 2026-06-08 07:18:58.349431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31673 |
vulnerable | 2026-06-08 07:18:58.347726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13083 |
vulnerable | 2026-06-08 07:04:31.537066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13082 |
vulnerable | 2026-06-08 07:04:31.536723 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13081 |
vulnerable | 2026-06-08 07:04:31.536339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13080 |
vulnerable | 2026-06-08 07:04:31.535732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55638 |
vulnerable | 2026-06-08 06:54:17.154137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55637 |
vulnerable | 2026-06-08 06:54:17.153770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55636 |
vulnerable | 2026-06-08 06:54:17.153325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55635 |
vulnerable | 2026-06-08 06:54:17.152707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-55634 |
vulnerable | 2026-06-08 06:54:17.151546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45440 |
vulnerable | 2026-06-08 06:48:06.226168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12393 |
vulnerable | 2026-06-08 06:23:51.838364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11942 |
vulnerable | 2026-06-08 06:23:50.711573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11941 |
vulnerable | 2026-06-08 06:23:50.710184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13688 |
vulnerable | 2026-06-08 05:18:01.011579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13671 |
vulnerable | 2026-06-08 05:18:00.999851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13667 |
vulnerable | 2026-06-08 05:18:00.996147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13666 |
vulnerable | 2026-06-08 05:18:00.995644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13665 |
vulnerable | 2026-06-08 05:18:00.995343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13664 |
vulnerable | 2026-06-08 05:18:00.995011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13663 |
vulnerable | 2026-06-08 05:18:00.994438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13662 |
vulnerable | 2026-06-08 05:18:00.993317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6342 |
vulnerable | 2026-06-08 05:14:11.362268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6341 |
vulnerable | 2026-06-08 05:14:11.361710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6340 |
vulnerable | 2026-06-08 05:14:11.361128 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6339 |
vulnerable | 2026-06-08 05:14:11.360331 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6338 |
vulnerable | 2026-06-08 05:14:11.358827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6924 |
vulnerable | 2026-06-08 05:09:55.172901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6923 |
vulnerable | 2026-06-08 05:09:55.172557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6922 |
vulnerable | 2026-06-08 05:09:55.172133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6921 |
vulnerable | 2026-06-08 05:09:55.171600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6381 |
vulnerable | 2026-06-08 05:09:51.166832 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6379 |
vulnerable | 2026-06-08 05:09:51.165781 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6377 |
vulnerable | 2026-06-08 05:09:51.158853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.