https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T23:16:58.407397+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-264 DRUPAL-CONTRIB-2026-264 2026-10-30T23:16:58.433397+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/commerce_stripe

This module enables you to take payments via multiple Stripe APIs.

The module doesn't sufficiently verify the cryptographic signature of a webhook event when a signing secret has not been properly configured in the payment gateway settings.

This vulnerability is mitigated by the fact that not all payment gateway plugins in the module utilize webhooks. Furthermore, any payment gateway configuration with any value for its webhook signing secret will prevent inappropriate processing.

 https://db.gcve.eu/vuln/fkie_cve-2026-118559 fkie_cve-2026-118559 2026-10-30T23:16:58.433460+00:00

Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.

 https://db.gcve.eu/vuln/ghsa-w776-25r7-2258 GHSA-w776-25r7-2258 2026-10-30T23:16:58.433486+00:00

Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4230 WID-SEC-W-2026-4230 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-30T23:16:58.433505+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.