Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-114530 DRUPAL-CONTRIB-2026-227EUVD-2026-113545GHSA-j7q7-fjvx-wqxr

Dopup - Critical - Information disclosure - SA-CONTRIB-2026-227

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Vendor: Drupal Product: Dopup Package: drupal/dopup Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal Dopup allows Forceful Browsing. This issue affects Dopup versions: from 0.0.0 to 1.0.7.

Affected products

VendorProductAffectedFixed
Drupal Dopup 0.0.0 – < 1.0.7 1.0.7

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/dopup < 1.0.7 1.0.7 DRUPAL-CONTRIB-2026-227

Advisories 1

References