Skip to content
OpenAdvisories
Low · 3.3 CVE-2026-118568 DRUPAL-CONTRIB-2026-291EUVD-2026-113683GHSA-whvp-fx3x-2r9q

Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve Embedded Sensitive Data. This issue affects Content Sync (content-sync.io) versions: from 0.0.0 to 3.2.2.

Affected products

VendorProductAffectedFixed
Drupal Content Sync (content-sync.io) 0.0.0 – < 3.2.2 3.2.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/cms_content_sync < 3.2.2 3.2.2 DRUPAL-CONTRIB-2026-291

Advisories 1

References