← Back

Drupal Canvas

drupal_canvas

Vendor: Drupal Canvas Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Drupal Canvas Project
1Drupal Canvas
Mar 31, 2026
Mar 25, 2026
N/A· v4
5.0 MEDIUM· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1.
1Drupal Canvas Project
1Drupal Canvas
Feb 11, 2026
Feb 4, 2026
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.