Threats tagged 'drupal-contrib-2026-281'

The CAPTCHA module for Drupal allows forms to be protected by a challenge to block automated submissions. However, it does not fully invalidate a solved CAPTCHA session, enabling a protected form to be submitted multiple times without solving a new CAPTCHA. This reduces the effectiveness of the CAPTCHA in preventing automated spam registrations, comment spam, and brute-force login attempts. The issue affects versions prior to 1.18.0 and versions from 2.0.0 up to but not including 2.0.11. Fixes are available in versions 1.18.0 and 2.0.11.