Security advisories for third-party projects that are not part of Drupal core - this includes all modules, themes, and installation profiles that have been contributed by a community member. These posts by the Drupal security team are also sent to the security announcements e-mail list.

SA-CONTRIB-2015-037 - Path Breadcrumbs - Access Bypass

SA-CONTRIB-2015-036 - Public Download Count - Cross Site Scripting (XSS) - Unsupported

SA-CONTRIB-2015-035 - Ajax Timeline - Cross Site Scripting (XSS)

SA-CONTRIB-2015-034 - Commerce WeDeal - Open Redirect

SA-CONTRIB-2015-033 - Certify - Access bypass and information disclosure

SA-CONTRIB-2015-032 - Node Invite - Multiple vulnerabilities

SA-CONTRIB-2015-031 - GD Infinite Scroll - Multiple vulnerabilites

SA-CONTRIB-2015-030 - Amazon AWS - Access bypass

SA-CONTRIB-2015-029 - Corner - Cross Site Request Forgery (CSRF) - Unsupported

SA-CONTRIB-2015-028 - Shibboleth Authentication - Cross Site Request Forgery (CSRF)

Pages

Subscribe with RSS Subscribe to Security advisories for contributed projects