Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-58589 DRUPAL-CONTRIB-2026-067EUVD-2026-43071GHSA-wfpx-3cw4-cw3g

FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-067

Published Jul 10, 2026 · Updated Jul 13, 2026 · Assigned by drupal

Vendor: Drupal Product: FlowDrop Package: drupal/flowdrop Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: from 0.0.0 to 1.6.0.

Affected products

VendorProductAffectedFixed
Drupal FlowDrop 0.0.0 – < 1.6.0 1.6.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/flowdrop < 1.6.0 1.6.0 DRUPAL-CONTRIB-2026-067

Advisories 1

References