Product by Open Source
Drupal Content Sync
35 known vulnerabilities in Drupal Content Sync (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
35
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-118539 | Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254 | 6.5 | |
| Not rated | CVE-2026-118584 | Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-289 | — | |
| Not rated | CVE-2026-118583 | Field Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-288 | — | |
| Not rated | CVE-2026-118582 | CAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281 | — | |
| Not rated | CVE-2026-118576 | Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286 | — | |
| Not rated | CVE-2026-118575 | Signature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285 | — | |
| Not rated | CVE-2026-118574 | S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279 | — | |
| Not rated | CVE-2026-118573 | OAuth2 Token Manager - Critical - Access bypass - SA-CONTRIB-2026-290 | — | |
| Not rated | CVE-2026-118572 | OAuth Login - OAuth OIDC SSO - Critical - Authentication bypass - SA-CONTRIB-2026-284 | — | |
| Not rated | CVE-2026-118571 | Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292 | — | |
| Not rated | CVE-2026-118570 | Fasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283 | — | |
| Not rated | CVE-2026-118569 | Fasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282 | — | |
| Not rated | CVE-2026-118568 | Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291 | — | |
| Not rated | CVE-2026-118567 | Bulk Update User Roles - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-280 | — | |
| Not rated | CVE-2026-118562 | Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275 | — | |
| Not rated | CVE-2026-118561 | Single Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274 | — | |
| Not rated | CVE-2026-118559 | Drupal Commerce Stripe: Improper Verification of Cryptographic Signature | — | |
| Not rated | CVE-2026-118558 | Commerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263 | — | |
| Not rated | CVE-2026-118557 | Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262 | — | |
| Not rated | CVE-2026-118556 | Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261 | — | |
| Not rated | CVE-2026-118555 | Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260 | — | |
| Not rated | CVE-2026-118554 | OpenID Connect Client - Moderately critical - Improper authentication - SA-CONTRIB-2026-287 | — | |
| Not rated | CVE-2026-118553 | AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273 | — | |
| Not rated | CVE-2026-118552 | AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272 | — | |
| Not rated | CVE-2026-118551 | AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271 | — |