Search for packages
Package details: pkg:composer/drupal/drupal@8.4.0-alpha0
purl pkg:composer/drupal/drupal@8.4.0-alpha0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-djr8-k9kb-6ua1
Aliases:
CVE-2018-7600
GHSA-7fh9-933g-885p
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
8.4.6
Affected by 38 other vulnerabilities.
8.5.1
Affected by 39 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T09:22:38.478225+00:00 GitLab Importer Affected by VCID-djr8-k9kb-6ua1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/drupal/drupal/CVE-2018-7600.yml 37.0.0