Skip to content
OpenAdvisories

Package · Packagist

drupal/tinypng

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.7
    CVE-2026-114547

    TinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246

    Missing Authorization vulnerability in Drupal TinyPNG allows Forceful Browsing. This issue affects TinyPNG versions: from 0.0.0 to 2.0.2.

    Drupal TinyPNG drupal/tinypng Packagist