Package · Packagist

drupal/restrict_route_by_ip

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.3

CVE-2026-107255

Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.

Drupal Restrict route by IP drupal/restrict_route_by_ip Packagist

Oct 30, 2026
High 8.8

CVE-2025-47701

Restrict route by IP - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-047

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Restrict route by IP allows Cross Site Request Forgery.This issue affects Restrict route by IP: from 0.0.0 before 1.3.0.

Drupal Restrict route by IP drupal/restrict_route_by_ip Packagist

May 14, 2025