PatchClock

PHP security digest · Packages

drupal/restrict_route_by_ip security advisories

1 advisory we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. Not rated 7 Oct 2026

    This module enables you to restrict access to routes by IP address. The module doesn't reliably restrict a subset of dynamic routes, leading to an access bypas...

    Fixed in 1.3.1, 2.0.1 · CVE-2026-107255

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including drupal/restrict_route_by_ip, and the version that fixes it.