[LOW] Drupal Full Path Disclosure

PKSA-styk-3knc-d1bt CVE-2024-45440 GHSA-mg8j-w93w-xjgc

Affected version: >=11.0.0,<11.0.5|>=8.0.0,<10.3.6

Reported by:
GitHub

[MEDIUM] Drupal core - Moderately critical - Denial of Service

PKSA-2gfj-5sh8-j3c5 GHSA-f84q-mgj9-8jfc

Affected version: >=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.6.0|>=8.6.0,<8.7.0|>=8.7.0,<8.8.0|>=8.8.0,<8.9.0|>=8.9.0,<9.0.0|>=9.0.0,<9.1.0|>=9.1.0,<9.2.0|>=9.2.0,<9.3.0|>=9.3.0,<9.4.0|>=9.4.0,<9.5.0|>=9.5.0,<10.0.0|>=10.0.0,<10.1.0|>=10.1.0,<10.1.8|>=10.2.0,<10.2.2

Reported by:
FriendsOfPHP/security-advisories, GitHub

[CRITICAL] Cache poisoning in drupal/core

PKSA-my7h-svxh-5q3g CVE-2023-5256 GHSA-rjqg-3h9m-fx5x

Affected version: >=10.1.0,<10.1.4|>=10.0.0,<10.0.11|>=8.7.0,<9.5.11

Reported by:
GitHub

[CRITICAL] Access bypass in Drupal core

PKSA-h7d4-5mdz-2965 CVE-2023-31250 GHSA-8849-cv9f-vccm

Affected version: >=7.0.0,<7.96|>=9.0.0,<9.4.14|>=9.5.0,<9.5.8|>=10.0.0,<10.0.8

Reported by:
GitHub