Skip to content

Commit ef02bc4

Browse files
feat: update advisories (#169)
🤖 beep boop - looks like there's some changes to the advisories! Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
1 parent 967c263 commit ef02bc4

1 file changed

Lines changed: 80 additions & 0 deletions

File tree

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
{
2+
"schema_version": "1.7.0",
3+
"id": "DRUPAL-CONTRIB-2025-126",
4+
"modified": "2025-12-17T17:47:13.000Z",
5+
"published": "2025-12-17T17:47:13.000Z",
6+
"aliases": [
7+
"CVE-2025-14840"
8+
],
9+
"details": "Http Client Manager introduces a new Guzzle based plugin which allows you to manage HTTP clients using Guzzle Service Descriptions via YAML, JSON or PHP files, in a simple and efficient way. The modules allows administrators to configure HTTP requests as part of Event Condition Action (ECA) automation.\n\nThe module does not sufficiently maintain separation of data from request operations, potentially leading to information disclosure in very uncommon situations.",
10+
"affected": [
11+
{
12+
"package": {
13+
"ecosystem": "Packagist:https://packages.drupal.org/8",
14+
"name": "drupal/http_client_manager"
15+
},
16+
"severity": [],
17+
"ranges": [
18+
{
19+
"type": "ECOSYSTEM",
20+
"events": [
21+
{
22+
"introduced": "0"
23+
},
24+
{
25+
"fixed": "9.3.13"
26+
}
27+
],
28+
"database_specific": {
29+
"constraint": "<9.3.13"
30+
}
31+
},
32+
{
33+
"type": "ECOSYSTEM",
34+
"events": [
35+
{
36+
"introduced": "10.0.0"
37+
},
38+
{
39+
"fixed": "10.0.2"
40+
}
41+
],
42+
"database_specific": {
43+
"constraint": ">=10.0.0 <10.0.2"
44+
}
45+
},
46+
{
47+
"type": "ECOSYSTEM",
48+
"events": [
49+
{
50+
"introduced": "11.0.0"
51+
},
52+
{
53+
"fixed": "11.0.1"
54+
}
55+
],
56+
"database_specific": {
57+
"constraint": ">=11.0.0 <11.0.1"
58+
}
59+
}
60+
],
61+
"database_specific": {
62+
"affected_versions": "<9.3.13 || >=10.0.0 <10.0.2 || >=11.0.0 <11.0.1"
63+
}
64+
}
65+
],
66+
"references": [
67+
{
68+
"type": "WEB",
69+
"url": "https://www.drupal.org/sa-contrib-2025-126"
70+
}
71+
],
72+
"credits": [
73+
{
74+
"name": "mxh",
75+
"contact": [
76+
"https://www.drupal.org/u/mxh"
77+
]
78+
}
79+
]
80+
}

0 commit comments

Comments
 (0)