Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-13275 DRUPAL-CONTRIB-2024-039EUVD-2024-51488GHSA-jjvf-4cxj-rqv4

Security Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039

Published Jan 9, 2025 · Updated Jan 14, 2025 · Assigned by drupal

Description

Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3.

Affected products

VendorProductAffectedFixed
Drupal Security Kit 0.0.0 – < 2.0.3 2.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/seckit < 2.0.3 2.0.3 DRUPAL-CONTRIB-2024-039

Advisories 1

References