Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-73474 DRUPAL-CONTRIB-2026-097EUVD-2026-69991GHSA-qgvw-q84r-4fxw

Entity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by drupal

Vendor: Drupal Product: Entity Share Websub Package: drupal/entity_share_websub Ecosystem: Packagist

Description

Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2.

Affected products

VendorProductAffectedFixed
Drupal Entity Share Websub 0.0.0 – < 1.1.2 1.1.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/entity_share_websub < 1.1.2 1.1.2 DRUPAL-CONTRIB-2026-097

Advisories 1

References