PHP security digest · Packages

drupal/media_alias_display security advisories

1 advisory we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

Not rated 21 Oct 2026

This module allows for direct viewing of a file with the URL alias. In some cases, files may be served with the HTTP header `Cache-Control: public` when they s...

Fixed in 2.1.2, 3.0.2 · CVE-2026-114546

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including drupal/media_alias_display, and the version that fixes it.