Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-8495 DRUPAL-CONTRIB-2026-037EUVD-2026-30992GHSA-7fjf-jmgw-92f2

Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-037

Published May 19, 2026 · Updated May 20, 2026 · Assigned by drupal

Vendor: Drupal Product: Date iCal Package: drupal/date_ical Ecosystem: Packagist

Description

Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.

This issue affects Date iCal: from 0.0.0 before 4.0.15.

Affected products

VendorProductAffectedFixed
Drupal Date iCal 0.0.0 – < 4.0.15 4.0.15

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/date_ical < 4.0.15 4.0.15 DRUPAL-CONTRIB-2026-037

Advisories 1

References