PatchClock

PHP security digest · Packages

drupal/webform security advisories

20 advisories we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and render submitted values in configurable formats. Webform does not sufficientl...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96355

  2. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Webform did not sufficiently g...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96356

  3. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module did not sufficientl...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96398

  4. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Form submissions may include up...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96357

  5. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The Webform Share submodule ca...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96364

  6. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Site builders may also configur...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96365

  7. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Site builders may also configu...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96366

  8. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module does not sufficient...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96373

  9. Not rated 23 Sep 2026

    The Webform module enables site builders to create forms and collect submissions. The module does not sufficiently restrict access to configure Remote HTTP Ope...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96372

  10. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module does not sufficient...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96371

  11. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. When Webform is used with JSON...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96369

  12. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module includes a Webform...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96370

  13. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Site builders may add tooltips...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96368

  14. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module does not sufficient...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96367

  15. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Webform includes a submodule c...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96363

  16. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. Site builders may also configur...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96362

  17. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module did not sufficientl...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96359

  18. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module includes a rating e...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96358

  19. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module does not sufficient...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96361

  20. Not rated 23 Sep 2026

    The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module provides JavaScript...

    Fixed in 6.2.12, 6.3.1 · CVE-2026-96360

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including drupal/webform, and the version that fixes it.