https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T04:26:25.044381+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-213 DRUPAL-CONTRIB-2026-213 2026-11-10T04:26:25.046694+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/freelinking

This module enables you to configure a WIKI-like input filter that allows users to create links to site and external content.

The module doesn’t sufficiently prevent page titles being viewed for certain privately-accessible URLs.

This vulnerability is mitigated by the fact that an attacker must have access to use a text format with the Freelinking plugin configured to allow privately-accessible external URLs to be crawled. Site administrators may want to disable this functionality to evaluate any risk.

 https://db.gcve.eu/vuln/fkie_cve-2026-107310 fkie_cve-2026-107310 2026-11-10T04:26:25.046786+00:00

Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3.

 https://db.gcve.eu/vuln/ghsa-p6fh-9484-jwr6 GHSA-p6fh-9484-jwr6 2026-11-10T04:26:25.046828+00:00

Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request Forgery. This issue affects Freelinking versions: from 0.0.0 to 4.0.3.