Displaying 1 - 50 of 150
Title Status Priority Category Version Component Replies Last updatedsort ascending Assigned to Created
PrivateFiles check may fail or give misleading results for alternate stream wrappers Needs work Normal Bug report 3.0.x-dev Code 10 4 hours 42 min 7 months 2 weeks
Can't uninstall Closed (works as designed) Normal Bug report 2.0.2 Code 5 1 week 1 day 3 weeks 3 days
After upgrading from 2.x to 3.x skipped config is null Postponed (maintainer needs more info) Normal Bug report 3.0.0 Code 4 3 weeks 9 hours 3 weeks 10 hours
State should be cleaned on uninstall Closed (fixed) Normal Bug report 3.0.x-dev Code 15 1 month 4 days 2 months 3 days
name / passwords check not working as expected Closed (fixed) Normal Bug report 3.0.0-rc2 Code 7 1 month 2 weeks 2 months 2 weeks
Warning: Undefined array key "result" in security_review_requirements() (line 51 of security_review.install) Closed (fixed) Normal Bug report 3.0.0-rc2 Code 7 1 month 2 weeks 2 months 1 week
State should be cleaned on uninstall Closed (fixed) Normal Bug report 2.0.2 Code 5 1 month 3 weeks 2 months 1 week
Message TypeError: array_key_exists(): Argument #2 ($array) must be of type array, null given in array_key_exists() Closed (outdated) Normal Bug report 3.0.x-dev Code 14 2 months 1 week 3 months 2 weeks
security_review.checks.yml fails blt yaml validation Closed (works as designed) Major Bug report 3.0.x-dev Code 8 2 months 3 weeks 2 months 3 weeks
Long field names which are shortened by Drupal doesn't work. Closed (fixed) Normal Bug report 2.0.x-dev Code 18 3 months 1 day 3 years 7 months
Error: Call to a member function isAdmin() on null in Drupal\security_review\Security->rolePermissions() Closed (fixed) Normal Bug report 2.0.0 Code 9 3 months 2 weeks 4 years 9 months
PHP 8.1 Warning: Array to string conversion Closed (fixed) Normal Bug report 2.0.x-dev Code 10 3 months 3 weeks 4 months 4 weeks
Executable PHP in files directory - false negative Closed (outdated) Normal Bug report 7.x-1.3 Code 21 4 months 2 weeks 9 years 10 months
SQL syntax error in Field check when run on PostgreSQL Closed (fixed) Normal Bug report 2.0.x-dev Code 8 5 months 3 days 7 months 2 weeks
PHP warning: in_array() expects parameter 2 to be array Closed (fixed) Normal Bug report 8.x-1.x-dev Code 16 7 months 1 week 5 years 2 months
"VendorDirectory" help text issues Closed (fixed) Minor Bug report 2.0.x-dev User interface 7 7 months 1 week 9 months 4 days
"Base table or view not found" when running report with CiviCRM on Drupal 9. Closed (duplicate) Normal Bug report 2.0.x-dev Code 4 7 months 2 weeks 9 months 3 weeks
TypeError: Drupal\security_review\CheckResult::__construct(): Argument #6 ($hushedFindings) must be of type array, null given Closed (outdated) Normal Bug report 2.0.1 Code 7 7 months 2 weeks 1 year 1 month
Table is empty, broken query Closed (duplicate) Normal Bug report 2.0.1 Code 4 7 months 3 weeks 7 months 3 weeks
Unsafe file upload extensions Details page throws an exception Closed (duplicate) Critical Bug report 2.0.1 Code 3 7 months 3 weeks 11 months 2 weeks
New Checks/NamePasswords does not scale with a large number of user accounts Closed (fixed) Normal Bug report 2.0.1 Code 16 12 months 4 days 1 year 2 months
Drupal coding standard issues | PHPCS Closed (won't fix) Normal Bug report 2.0.x-dev Code 5 1 year 3 weeks 1 year 3 weeks
Timeout cURL error 28 when running "Executable PHP" Test Closed (outdated) Normal Bug report 2.0.0 Code 5 1 year 4 weeks 1 year 3 months
Error: Class "Symfony\Component\Filesystem\Filesystem" not found Closed (fixed) Normal Bug report 2.0.1 Code 11 1 year 1 month 1 year 2 months
Schema issues Closed (fixed) Normal Bug report 2.0.x-dev Code 5 1 year 1 month 1 year 1 month
Base table or view not found (table names incorrect for long table names) Closed (fixed) Normal Bug report 2.0.x-dev Code 8 1 year 1 month 1 year 1 month
False Positive in multisite For all {subdomain}/file/* except current subdomain Closed (outdated) Normal Bug report 7.x-1.x-dev Code 9 1 year 1 month 8 years 8 months
Only check default view access if it is used Closed (fixed) Normal Bug report 2.0.x-dev Code 18 1 year 2 months 2 years 9 months
Refactor trusted hosts check Closed (fixed) Normal Bug report 2.0.x-dev Code 16 1 year 2 months 5 years 6 months
Field check out of memory Closed (fixed) Normal Bug report 2.0.x-dev Code 15 1 year 2 months 2 years 10 months
Default for public filesystem path not referring to current site Closed (fixed) Normal Bug report 7.x-1.x-dev Code 7 1 year 2 months alex-b 7 years 6 months
Excess space or tab symbols at .htaccess ("files" folder) provide false negative Closed (fixed) Normal Bug report 7.x-1.2 Code 11 1 year 3 months 9 years 1 month
Display descriptions in drush results Closed (fixed) Normal Bug report 7.x-1.x-dev Code 7 1 year 3 months 7 years 11 months
The "last run" timestamp is not updated when running a review via drush Closed (fixed) Normal Bug report 7.x-1.x-dev Code 8 1 year 3 months 5 years 3 months
.json file extention recognized as .js Closed (fixed) Normal Bug report 7.x-1.3 Code 9 1 year 3 months 8 years 1 month
Required parameter $check_name follows optional parameter Closed (fixed) Normal Bug report 7.x-1.3 Code 13 1 year 3 months 1 year 8 months
Remove or update links to DrupalScout.com Closed (fixed) Normal Bug report 7.x-1.x-dev Documentation 12 1 year 3 months hey_germano 3 years 11 months
Every role is trusted Closed (outdated) Major Bug report 7.x-1.x-dev Code 5 1 year 3 months 8 years 11 months
.ht.sqlite database folder -- false permissions warning Closed (outdated) Normal Bug report 7.x-1.1 Code 2 1 year 3 months 9 years 10 months
PHP in Help text of a Content Type bypasses checks. Closed (outdated) Normal Bug report 7.x-1.x-dev Code 3 1 year 3 months 7 years 1 month
Incorrect warnings about writeable files Closed (outdated) Major Bug report 7.x-1.2 Code 3 1 year 3 months 8 years 5 months
Multisite: /sites/<othersite>/files are flagged as writeable Closed (outdated) Normal Bug report 7.x-1.3 Code 4 1 year 3 months 5 years 9 months
Core update fails using Drush Closed (outdated) Normal Bug report 7.x-1.3 Code 2 1 year 3 months 5 years 11 months
Executable PHP failure message is misleading Closed (outdated) Normal Bug report 7.x-1.2 Code 2 1 year 3 months 8 years 8 months
HTTP Request Status Fails Closed (outdated) Normal Bug report 7.x-1.2 Code 2 1 year 3 months 8 years 5 months
Failed SQL query causes http 500 status error Closed (works as designed) Major Bug report 7.x-1.3 Code 7 1 year 3 months 6 years 8 months
Bad file permissions advice - causes 500 error Closed (outdated) Minor Bug report 7.x-1.3 User interface 2 1 year 3 months 6 years 7 months
False positive for private files below docroot Closed (outdated) Normal Bug report 7.x-1.x-dev Code 2 1 year 3 months 6 years 3 months
Web server file system permissions - Doesn't register permissions set on files. Closed (works as designed) Normal Bug report 7.x-1.3 User interface 4 1 year 3 months 6 years 5 months
False positive when user and group owner are the same name Closed (outdated) Normal Bug report 7.x-1.x-dev Code 6 1 year 3 months 8 years 6 months

Pages

Subscribe with RSS Subscribe to Issues for Security Review