Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-114548 DRUPAL-CONTRIB-2026-247EUVD-2026-113525GHSA-7xvw-p86p-5r6x

ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2.

Affected products

VendorProductAffectedFixed
Drupal ImageAPI Optimize WebP 0.0.0 – < 2.1.2 2.1.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/imageapi_optimize_webp < 2.1.2 2.1.2 DRUPAL-CONTRIB-2026-247

Advisories 1

References