Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

drupal/monster_menus

4 known vulnerabilities (1 critical, 1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 1 high, 2 medium
Registry
Packagist

Advisories 4

  • Monster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253

    Affected: fixed in 9.5.6.

  • CVE-2026-81201Medium 6.1

    Monster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116

    Affected: fixed in 9.5.3.

  • CVE-2024-13288Medium 4.3

    Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052

    Affected: fixed in 9.3.4; from 9.4.0, fixed in 9.4.2.

  • CVE-2024-13281Critical 9.1

    Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045

    Affected: fixed in 9.3.2.