Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-96377 DRUPAL-CONTRIB-2026-188EUVD-2026-107813GHSA-5q96-f7p6-34h4

Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188

Published Oct 22, 2026 · Updated Nov 3, 2026 · Assigned by drupal

Description

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: from 0.0.0 to 1.0.7.

Affected products

VendorProductAffectedFixed
Drupal Combined image style 0.0.0 – < 1.0.7 1.0.7

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/combined_image_style < 1.0.7 1.0.7 DRUPAL-CONTRIB-2026-188

Advisories 1

References