Skip to content
OpenAdvisories

Package · Packagist

drupal/commerce_stripe

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-118559

    Commerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-264

    Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.

    Drupal Commerce Stripe drupal/commerce_stripe Packagist
  • Medium 5.1
    CVE-2026-118560

    Commerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-265

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Stripe allows Cross-Site Scripting (XSS). This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3.

    Drupal Commerce Stripe drupal/commerce_stripe Packagist