Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-58590 DRUPAL-CONTRIB-2026-068EUVD-2026-43072GHSA-7v2j-q5j9-4g8x

FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-068

Published Jul 10, 2026 · Updated Jul 13, 2026 · Assigned by drupal

Vendor: Drupal Product: FlowDrop Package: drupal/flowdrop Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal FlowDrop allows Forceful Browsing. This issue affects FlowDrop versions: from 0.0.0 to 1.6.0.

Affected products

VendorProductAffectedFixed
Drupal FlowDrop 0.0.0 – < 1.6.0 1.6.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/flowdrop < 1.6.0 1.6.0 DRUPAL-CONTRIB-2026-068

Advisories 1

References