Drupal Canvas
Approved changes feed: RSS · Atom
cpe:2.3:a:drupal:drupal_canvas:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Drupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de) |
|---|---|
| Product | Drupal Canvas (db7b55a6-e1fc-5590-846c-691a3629c0e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58588 |
vulnerable | 2026-07-29 01:03:17.116759 |
Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.
Published: 2026-07-10T21:46:15.991Z
Updated: 2026-07-13T16:03:49.195Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58587 |
vulnerable | 2026-07-29 01:03:17.116396 |
Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS). This issue affects Drupal Canvas versions: from 0.0.0 to 1.4.2, from 1.5.0 to 1.5.2, from 1.6.0 to 1.6.1, from 1.7.0 to 1.7.1.
Published: 2026-07-10T21:46:15.116Z
Updated: 2026-07-13T16:08:13.354Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3216 |
vulnerable | 2026-06-08 08:01:18.182253 |
Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017
Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1.
Published: 2026-03-25T15:24:17.937Z
Updated: 2026-03-27T13:58:20.679Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1553 |
vulnerable | 2026-06-08 07:49:08.877856 |
Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006
Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.
Published: 2026-02-04T20:26:22.334Z
Updated: 2026-02-04T21:21:35.681Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.