Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-84918 DRUPAL-CONTRIB-2026-130EUVD-2026-107869GHSA-jmjm-hhfc-mfxc

Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by drupal

Description

Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3.

Affected products

VendorProductAffectedFixed
Drupal Monobank payment API 0.0.0 – < 1.0.3 1.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/monobank < 1.0.3 1.0.3 DRUPAL-CONTRIB-2026-130

Advisories 1

References