Security advisories for third-party projects that are not part of Drupal core - this includes all modules, themes, and installation profiles that have been contributed by a community member. These posts by the Drupal security team are also sent to the security announcements e-mail list.

SA-CONTRIB-2015-033 - Certify - Access bypass and information disclosure

SA-CONTRIB-2015-032 - Node Invite - Multiple vulnerabilities

SA-CONTRIB-2015-031 - GD Infinite Scroll - Multiple vulnerabilites

SA-CONTRIB-2015-030 - Amazon AWS - Access bypass

SA-CONTRIB-2015-029 - Corner - Cross Site Request Forgery (CSRF) - Unsupported

SA-CONTRIB-2015-028 - Shibboleth Authentication - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-027 - Quizzler - Cross Site Scripting (XSS)

SA-CONTRIB-2015-026 - Taxonews - Cross Site Scripting (XSS)

SA-CONTRIB-2015-025 - Patterns - Cross Site Request Forgery (CSRF)

SA-CONTRIB-2015-023 - Classified Ads - Cross Site Scripting (XSS)

Pages

Subscribe with RSS Subscribe to Security advisories for contributed projects