Threats tagged 'drupal-contrib-2026-297'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-122066Workflow notifications · This module enables you to send messages ("Notifications") to users upon a High2026-11-04GCVE DatabaseCVE-2026-122066 The Drupal Workflow Notifications module allows sending messages to users when a workflow state changes. A vulnerability exists due to insufficient protection of the Notification settings page, enabling unauthorized attackers to modify notification settings. This issue affects versions prior to 3.0.3 and has been fixed in version 3.0.3. Vulnerability #drupal-contrib-2026-297 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1