Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Drupal

Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087

SA-CONTRIB-2026-087 Jul 22, 2026 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-087. 1 reporter(s), 5 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-contrib-2026-087
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

5 lines
Showing 1–5 of 5
CVE-2026-16644 BR2026-0000-008845 unclaimed
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
Credited as Giuseppe (giuseppe87)
CVE-2026-16644 BR2026-0000-008846 unclaimed
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
Credited as Dan Chadwick (danchadwick)
CVE-2026-16644 BR2026-0000-008847 unclaimed
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
Credited as Jacob Rockowitz (jrockowitz)
CVE-2026-16644 BR2026-0000-008848 unclaimed
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
Credited as Liam Morland (liam morland)
CVE-2026-16644 BR2026-0000-008849 unclaimed
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
Credited as Nelson Alves (nsalves)