BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Drupal

Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090

SA-CONTRIB-2026-090 Jul 29, 2026 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-090. 1 reporter(s), 1 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-contrib-2026-090
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines
All 2 CVEs 2 Additional recognition 0 Unclaimed only
Showing 1–2 of 2
CVE-2026-18259 BR2026-0000-008840 unclaimed
Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090
Credited as Robin (robincs)
CVE-2026-18259 BR2026-0000-008841 unclaimed
Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090
Credited as Kyrylo Loboda (lobodakyrylo)