https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 02:09:53 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-198 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/actstream</p> <p>Actstream (short for Activity Stream) aggregates a user&#39;s activity from external services (RSS feeds, etc.) into per-user activity stream entities.</p> <p>The configuration route does not sufficiently check that the user editing it is the account owner (or a user administrator) leading to an access bypass vulnerability.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/actstream</p> <p>Actstream (short for Activity Stream) aggregates a user&#39;s activity from external services (RSS feeds, etc.) into per-user activity stream entities.</p> <p>The configuration route does not sufficiently check that the user editing it is the account owner (or a user administrator) leading to an access bypass vulnerability.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-198 https://db.gcve.eu/vuln/fkie_cve-2026-107257 <p>Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.</p> <p>Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107257 https://db.gcve.eu/vuln/ghsa-49qr-j2v8-5wg8 <p>Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.</p> <p>Incorrect Authorization vulnerability in Drupal Actstream allows Forceful Browsing. This issue affects Actstream versions: from 0.0.0 to 2.0.1, from 2.1.0 to 2.1.1.</p> https://db.gcve.eu/vuln/ghsa-49qr-j2v8-5wg8