Skip to content
OpenAdvisories
High · 7.5 CVE-2026-96365 DRUPAL-CONTRIB-2026-170EUVD-2026-107831GHSA-9762-rjpx-63v2

Webform - Less critical - Denial of service - SA-CONTRIB-2026-170

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by drupal

Description

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.

Affected products

VendorProductAffectedFixed
Drupal Webform 0.0.0 – < 6.2.12, 6.3.0 – < 6.3.1 6.2.12

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/webform < 6.2.12 · >= 6.3.0, < 6.3.1 6.2.12, 6.3.1 DRUPAL-CONTRIB-2026-170

Advisories 1

References