Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-1553 DRUPAL-CONTRIB-2026-006EUVD-2026-5339GHSA-mv4x-xj43-wwww

Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006

Published Feb 4, 2026 · Updated Feb 4, 2026 · Assigned by drupal

Vendor: Drupal Product: Drupal Canvas Package: drupal/canvas Category: Web / CMS Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before 1.0.4.

Affected products

VendorProductAffectedFixed
Drupal Drupal Canvas 0.0.0 – < 1.0.4 1.0.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/canvas < 1.0.4 1.0.4 DRUPAL-CONTRIB-2026-006

Advisories 1

References