https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T04:02:40.259600+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-202 DRUPAL-CONTRIB-2026-202 2026-11-13T04:02:40.261872+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/gutenberg

This module provides a new UI experience for node editing using the Gutenberg Editor library.

The module does not sufficiently check entity access in several editor endpoints.

This vulnerability is mitigated by the fact that an attacker must have a role with the “use gutenberg” permission.

 https://db.gcve.eu/vuln/fkie_cve-2026-107263 fkie_cve-2026-107263 2026-11-13T04:02:40.261983+00:00

Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versions: from 0.0.0 to 2.15.0, from 3.0.0 to 3.0.7.

 https://db.gcve.eu/vuln/ghsa-p5rg-h645-gvw4 GHSA-p5rg-h645-gvw4 2026-11-13T04:02:40.262047+00:00

Incorrect Authorization vulnerability in Drupal Gutenberg allows Forceful Browsing. This issue affects Gutenberg versions: from 0.0.0 to 2.15.0, from 3.0.0 to 3.0.7.