Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/drupal/core-recommended@11.0.0-alpha1
purl pkg:composer/drupal/core-recommended@11.0.0-alpha1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-u4w3-usvb-jyf6 Drupal Full Path Disclosure `core/authorize.php` in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of `hash_salt` is `file_get_contents` of a file that does not exist. CVE-2024-45440
GHSA-mg8j-w93w-xjgc

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:06:51.994419+00:00 GitLab Importer Fixing VCID-u4w3-usvb-jyf6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/core-recommended/CVE-2024-45440.yml 38.4.0
2026-04-12T00:24:54.968666+00:00 GitLab Importer Fixing VCID-u4w3-usvb-jyf6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/core-recommended/CVE-2024-45440.yml 38.3.0
2026-04-03T00:32:30.591351+00:00 GitLab Importer Fixing VCID-u4w3-usvb-jyf6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/core-recommended/CVE-2024-45440.yml 38.1.0