PatchClock

PHP security digest · Packages

drupal/commerce_stripe security advisories

3 advisories we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. Not rated 28 Oct 2026

    This module enables you to use the Stripe Connect API to quickly configure your Drupal Commerce store to take payments via multiple Stripe APIs. Under certain...

    Fixed in 2.2.3 · CVE-2026-118560

  2. Not rated 28 Oct 2026

    This module enables you to take payments via multiple Stripe APIs. The module doesn't sufficiently verify the cryptographic signature of a webhook event when a...

    Fixed in 1.4.0, 2.2.3 · CVE-2026-118559

  3. Not rated 28 Oct 2026

    This module enables you to use the Stripe Connect API to quickly configure your Drupal Commerce store to take payments via multiple Stripe APIs. When redirecti...

    Fixed in 2.2.3 · CVE-2026-118558

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including drupal/commerce_stripe, and the version that fixes it.