High 1 exploited CVE DLA-2530-1 1 CVE

drupal7 - security update

Published Jan 21, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	drupal7	7.52-2+deb9u14

Vulnerabilities 1

High 7.5

CVE-2020-36193 Exploited EPSS 71%

Directory Traversal in Archive_Tar

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

drupal7 php-pear php-pear pear/archive_tar Debian Ubuntu Alpine Packagist

Jan 18, 2021
KEV Aug 25, 2022