The Acquia DAM module for Drupal has been identified with a significant security flaw that could lead to unauthorized information access. This vulnerability, tracked as CVE-2025-9954, concerns a missing authorization check within the module. Essentially, the Acquia DAM module connects…
A significant security flaw has been found in the Drupal Simple OAuth (OAuth2) & OpenID Connect module. This vulnerability, identified as CVE-2025-12466, could allow unauthorized individuals to bypass authentication and gain access to parts of your Drupal site that should…
A significant security vulnerability has been identified within the Drupal CivicTheme Design System, a popular component used by many websites built on the Drupal platform. This flaw, officially designated as CVE-2025-12083, falls under the category of ‘Improper Neutralization of Input…
Overview The Drupal CivicTheme Design System, a crucial tool for crafting content-rich Drupal websites, has been found to have a significant security vulnerability. This issue, identified as an ‘Incorrect Authorization’ flaw, can lead to the unintended exposure of sensitive information.…
A security flaw has been identified in the Umami Analytics module for Drupal, known as a Cross-Site Scripting (XSS) vulnerability. This issue, tracked as CVE-2025-10931, could allow unauthorized script execution if not addressed. While rated as a low severity risk,…
