PatchClock

PHP security digest · Packages

drupal/single_content_sync security advisories

2 advisories we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. Not rated 28 Oct 2026

    Single Content Sync enables exporting and importing content, referenced entities, and files between Drupal sites. A maliciously crafted import file can cause u...

    Fixed in 1.4.19 · CVE-2026-118562

  2. Not rated 28 Oct 2026

    Single Content Sync enables exporting and importing content, referenced entities, and files between Drupal sites. The module does not sufficiently validate fil...

    Fixed in 1.4.19 · CVE-2026-118561

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including drupal/single_content_sync, and the version that fixes it.