Skip to content

Commit aac08ce

Browse files
feat: update advisories (#191)
🤖 beep boop - looks like there's some changes to the advisories! - https://www.drupal.org/SA-CONTRIB-2026-015 - https://www.drupal.org/SA-CONTRIB-2026-030 Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
1 parent 9f8a3c4 commit aac08ce

2 files changed

Lines changed: 79 additions & 1 deletion

File tree

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
{
2+
"schema_version": "1.7.0",
3+
"id": "DRUPAL-CONTRIB-2026-030",
4+
"modified": "2026-03-18T16:10:00.000Z",
5+
"published": "2026-03-18T16:10:00.000Z",
6+
"aliases": [
7+
"CVE-2026-4393"
8+
],
9+
"details": "This module provides a site administrator the ability to log users out after a specified time of inactivity.\n\nThe module doesn't sufficiently protect its routes from cross-site request forgery (CSRF), allowing the logout route to be triggered without user interaction.",
10+
"affected": [
11+
{
12+
"package": {
13+
"ecosystem": "Packagist:https://packages.drupal.org/8",
14+
"name": "drupal/autologout"
15+
},
16+
"severity": [],
17+
"ranges": [
18+
{
19+
"type": "ECOSYSTEM",
20+
"events": [
21+
{
22+
"introduced": "0"
23+
},
24+
{
25+
"fixed": "1.7.0"
26+
}
27+
],
28+
"database_specific": {
29+
"constraint": "<1.7.0"
30+
}
31+
},
32+
{
33+
"type": "ECOSYSTEM",
34+
"events": [
35+
{
36+
"introduced": "2.0.0"
37+
},
38+
{
39+
"fixed": "2.0.2"
40+
}
41+
],
42+
"database_specific": {
43+
"constraint": ">=2.0.0 <2.0.2"
44+
}
45+
}
46+
],
47+
"database_specific": {
48+
"affected_versions": "<1.7.0 || >=2.0.0 <2.0.2"
49+
}
50+
}
51+
],
52+
"references": [
53+
{
54+
"type": "WEB",
55+
"url": "https://www.drupal.org/sa-contrib-2026-030"
56+
}
57+
],
58+
"credits": [
59+
{
60+
"name": "Pierre Rudloff (prudloff)",
61+
"contact": [
62+
"https://www.drupal.org/u/prudloff"
63+
]
64+
}
65+
]
66+
}

advisories/captcha/DRUPAL-CONTRIB-2026-015.json

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.7.0",
33
"id": "DRUPAL-CONTRIB-2026-015",
4-
"modified": "2026-02-25T19:07:00.000Z",
4+
"modified": "2026-03-17T13:20:54.000Z",
55
"published": "2026-02-25T18:47:57.000Z",
66
"aliases": [
77
"CVE-2026-3214"
@@ -62,12 +62,24 @@
6262
"https://www.drupal.org/u/andrewbelcher"
6363
]
6464
},
65+
{
66+
"name": "Andrew Wang (andrew.wang)",
67+
"contact": [
68+
"https://www.drupal.org/u/andrewwang"
69+
]
70+
},
6571
{
6672
"name": "Chris Dudley (dudleyc)",
6773
"contact": [
6874
"https://www.drupal.org/u/dudleyc"
6975
]
7076
},
77+
{
78+
"name": "M Parker (mparker17)",
79+
"contact": [
80+
"https://www.drupal.org/u/mparker17"
81+
]
82+
},
7183
{
7284
"name": "Tim Wood (timwood)",
7385
"contact": [

0 commit comments

Comments
 (0)