Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Drupal

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

SA-CONTRIB-2026-171 Sep 23, 2026 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-171. 1 reporter(s), 4 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-contrib-2026-171
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

5 lines
Showing 1–5 of 5
CVE-2026-96364 BR2026-0000-015421 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
Credited as karing
CVE-2026-96364 BR2026-0000-015422 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
Credited as Alan Dixon (adixon)
CVE-2026-96364 BR2026-0000-015423 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
Credited as Dan Chadwick (danchadwick)
CVE-2026-96364 BR2026-0000-015424 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
Credited as Jacob Rockowitz (jrockowitz)
CVE-2026-96364 BR2026-0000-015425 unclaimed
Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171
Credited as Liam Morland (liam morland)