Package · Packagist

drupal/unpublished_node_permissions

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2026-84920

Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-132

Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1.8.0.

Drupal Unpublished Node Permissions drupal/unpublished_node_permissions Packagist

Oct 22, 2026