Advisories · Technology

Drupal Canvas.

Every CVE that names Drupal Canvas among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-58588 CVE record

CVSS 6.1 Medium

Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066
- Drupal Canvas
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2026
CVE-2026-58587 CVE record

CVSS 6.1 Medium

Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065
- Drupal Canvas
- Cross-site scripting (XSS)
Not analysed yet 10 Jul 2026
CVE-2026-3216 CVE record

CVSS 5.0 Medium

Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017
- Drupal Canvas
- Server-side request forgery (SSRF)
Not analysed yet 25 Mar 2026
CVE-2026-1553 CVE record

CVSS 4.8 Medium

Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006
- Drupal Canvas
- Broken access control
Not analysed yet 4 Feb 2026