Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

drupal/canvas

4 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 medium
Registry
Packagist

Advisories 4

  • CVE-2026-58588Medium 6.1

    Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066

    Affected: fixed in 1.4.2; from 1.5.0, fixed in 1.5.2; from 1.6.0, fixed in 1.6.1; from 1.7.0, fixed in 1.7.1.

  • CVE-2026-58587Medium 6.1

    Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065

    Affected: fixed in 1.4.2; from 1.5.0, fixed in 1.5.2; from 1.6.0, fixed in 1.6.1; from 1.7.0, fixed in 1.7.1.

  • CVE-2026-3216Medium 5.0

    Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017

    Affected: fixed in 1.1.1.

  • CVE-2026-1553Medium 4.8

    Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006

    Affected: fixed in 1.0.4.