Drupal Canvas Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Drupal Canvas Project records in CISA KEV

No Drupal Canvas Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Drupal Canvas 4 records LOW

Records

4 records in Drupal Canvas · all components

TI-2026-42168 CVE-2026-58588 · GHSA-4jgx-vqf2-p9g9

Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066

LOW 27

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00256 Published 2026-07-10 Fixed in 1.4.2, 1.5.2 +2 CWE-79

TI-2026-42167 CVE-2026-58587 · GHSA-vx3g-w5hr-294x

Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065

LOW 27

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal Canvas allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00256 Published 2026-07-10 Fixed in 1.4.2, 1.5.2 +2 CWE-79

TI-2026-02779 CVE-2026-3216 · GHSA-6qhv-qccp-876q

Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017

LOW 23

Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas: from 0.0.0 before 1.1.1.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00292 Published 2026-03-25 Fixed in 1.1.1 CWE-918

TI-2026-01242 CVE-2026-1553 · GHSA-mv4x-xj43-wwww

Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006

LOW 21

Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00164 Published 2026-02-04 Fixed in 1.0.4 CWE-863

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0