Search for packages
| purl | pkg:composer/drupal/core@10.2.9 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-a2ac-a2d7-vfb6 | Drupal Full Path Disclosure `core/authorize.php` in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of `hash_salt` is `file_get_contents` of a file that does not exist. |
CVE-2024-45440
GHSA-mg8j-w93w-xjgc |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-01T12:10:09.097044+00:00 | GithubOSV Importer | Fixing | VCID-a2ac-a2d7-vfb6 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/08/GHSA-mg8j-w93w-xjgc/GHSA-mg8j-w93w-xjgc.json | 36.1.3 |