Advisories · Technology

Drupal UI Icons.

Every CVE that names Drupal UI Icons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114527 CVE record

UI Icons - Critical - Cross site scripting - SA-CONTRIB-2026-221
- Drupal UI Icons
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-114532 CVE record

UI Icons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-230
- Drupal UI Icons
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-2349 CVE record

CVSS 6.1 Medium

UI Icons - Critical - Cross-site Scripting - SA-CONTRIB-2026-010
- Drupal UI Icons
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026