Packagist - OSV

GHSA-7mgc-c7pq-3rr3

Packagist/getgrav/grav

Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge yesterday

Fix available
Severity - 7.4 (High)

GHSA-mc5q-6hpj-rp7j

Packagist/getgrav/grav

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass) yesterday

Fix available
Severity - 6.5 (Medium)

GHSA-928x-9mpw-8h56

Packagist/getgrav/grav

Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits yesterday

Fix available
Severity - 6.5 (Medium)

DRUPAL-CONTRIB-2026-133

Packagist:https://packages.drupal.org/8/drupal/webform_submissions_delete

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-132

Packagist:https://packages.drupal.org/8/drupal/unpublished_node_permissions

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-131

Packagist:https://packages.drupal.org/8/drupal/photoswipe

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-130

Packagist:https://packages.drupal.org/8/drupal/monobank

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-129

Packagist:https://packages.drupal.org/8/drupal/media_library_importer

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-128

Packagist:https://packages.drupal.org/8/drupal/symfony_mailer_log

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-127

Packagist:https://packages.drupal.org/8/drupal/jsonapi_role_access

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-126

Packagist:https://packages.drupal.org/8/drupal/islandora

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-125

Packagist:https://packages.drupal.org/8/drupal/otp_verification

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-124

Packagist:https://packages.drupal.org/8/drupal/otp_verification

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-123

Packagist:https://packages.drupal.org/8/drupal/component_blocks

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-122

Packagist:https://packages.drupal.org/8/drupal/calculate_working_days

See record for full details 2 days ago

Fix available

DRUPAL-CONTRIB-2026-121

Packagist:https://packages.drupal.org/8/drupal/ai_translate

See record for full details 2 days ago

Fix available