Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2020-035

The File Example submodule within the Examples project does not properly sanitize certain filenames as described in [SA-CORE-2020-012](http…

Published Nov 18, 2020 · Updated Sep 10, 2026 · Assigned by DRUPAL

Description

The File Example submodule within the Examples project does not properly sanitize certain filenames as described in [SA-CORE-2020-012](https://www.drupal.org/sa-core-2020-012), along with other related vulnerabilities.

Therefore, File Example so is being removed from Examples until a version demonstrating file security best practices can added back in the future.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/examples >= 1.0.0, <= 1.0.0 · >= 3.0.0, <= 3.0.0 · >= 3.0.1, <= 3.0.1 — DRUPAL-CONTRIB-2020-035

References