Product by Open Source
Drupal Taxonomy Term Glossary
20 known vulnerabilities in Drupal Taxonomy Term Glossary (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-87937 | Drupal Central Authentication System (CAS) Server: Open Redirect | 6.5 | |
| Medium | CVE-2026-87936 | amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134 | 6.5 | |
| Medium | CVE-2026-87943 | SAML SSO - Service Provider - Critical - Improper access control - SA-CONTRIB-2026-141 | 6.5 | |
| Medium | CVE-2026-87950 | SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148 | 5.3 | |
| Medium | CVE-2026-87940 | Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138 | 5.4 | |
| Medium | CVE-2026-87945 | SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143 | 5.4 | |
| Medium | CVE-2026-87946 | SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144 | 4.8 | |
| Medium | CVE-2026-87947 | SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145 | 4.8 | |
| Medium | CVE-2026-87944 | SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142 | 4.8 | |
| Medium | CVE-2026-87954 | Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152 | 4.3 | |
| Medium | CVE-2026-87942 | SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140 | 4.6 | |
| Medium | CVE-2026-87955 | Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153 | 4.3 | |
| Medium | CVE-2026-87939 | Feed Block - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-137 | 4.2 | |
| Low | CVE-2026-87951 | SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149 | 3.8 | |
| Low | CVE-2026-87948 | SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146 | 3.5 | |
| Low | CVE-2026-87949 | SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147 | 3.3 | |
| Low | CVE-2026-87953 | Drupal SAML SSO - Service Provider: Server-Side Request Forgery (SSRF) | 3.3 | |
| Low | CVE-2026-87952 | Drupal SAML SSO - Service Provider: Authentication Bypass by Capture-replay | 3.1 | |
| Not rated | CVE-2026-87938 | CSP log - Critical - SQL Injection - SA-CONTRIB-2026-136 | — | |
| Not rated | CVE-2026-87941 | Patreon - Critical - Unsupported - SA-CONTRIB-2026-139 | — |