Skip to content
OpenAdvisories
Low · 2.7 CVE-2026-8492 DRUPAL-CONTRIB-2026-035EUVD-2026-30989GHSA-p6f3-29pv-cj66

Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035

Published May 19, 2026 · Updated May 20, 2026 · Assigned by drupal

Vendor: Drupal Product: Translate Drupal with GTranslate Package: drupal/gtranslate Category: Web / CMS Ecosystem: Packagist

Description

Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.

This issue affects Translate Drupal with GTranslate: from 0.0.0 before 3.0.5.

Affected products

VendorProductAffectedFixed
Drupal Translate Drupal with GTranslate 0.0.0 – < 3.0.5 3.0.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/gtranslate < 3.0.5 3.0.5 DRUPAL-CONTRIB-2026-035

Advisories 1

References