PatchClock

PHP security digest · Packages

drupal/commerce_shipping security advisories

2 advisories we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. Not rated 28 Oct 2026

    This module enables you to sell tangible products via Drupal Commerce that are organized into shipments for fulfillment. The module doesn't sufficiently check...

    Fixed in 2.16.0, 3.0.6 · CVE-2026-118557

  2. Not rated 28 Oct 2026

    This module enables you to sell tangible products via Drupal Commerce that are organized into shipments for fulfillment. The module doesn't sufficiently protec...

    Fixed in 2.16.0, 3.0.6 · CVE-2026-118556

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including drupal/commerce_shipping, and the version that fixes it.