Known Vulnerabilities for Web Links by Drupal
Listed below are 10 of the newest known vulnerabilities associated with "Web Links" by "Drupal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115507 json | Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.g... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-115502 json | A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially acc... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-115424 json | A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fa... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-115411 json | crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-115360 json | OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects users not authen... | Not Provided | 2026-10-22 | 2026-10-23 |
| CVE-2026-113796 json | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.... | Not Provided | 2026-10-21 | 2026-10-23 |
| CVE-2026-113355 json | Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject Java... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111931 json | Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redi... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-111921 json | Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write permissi... | Not Provided | 2026-10-17 | 2026-10-21 |
| CVE-2026-111916 json | Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-res... | Not Provided | 2026-10-17 | 2026-10-21 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Drupal | Web Links | 7.x-1.0 | |||
| Application | Drupal | Web Links | 7.x-1.0 | |||
| Application | Drupal | Web Links | 7.x-1.0 | |||
| Application | Drupal | Web Links | 7.x | |||
| Application | Drupal | Web Links | 6.x-2.6 | |||
| Application | Drupal | Web Links | 6.x-2.5 | |||
| Application | Drupal | Web Links | 6.x-2.4 | |||
| Application | Drupal | Web Links | 6.x-2.3 | |||
| Application | Drupal | Web Links | 6.x-2.2 | |||
| Application | Drupal | Web Links | 6.x-2.1 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 | |||
| Application | Drupal | Web Links | 6.x-2.0 |