https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 11:14:49 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-216 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/restrict_route_by_ip</p> <p>This module enables you to restrict access to routes by IP address.</p> <p>The module doesn&#39;t reliably restrict a subset of dynamic routes, leading to an access bypass vulnerability. The impact depends on how a site uses this module and whether it has any routes that are dynamic.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/restrict_route_by_ip</p> <p>This module enables you to restrict access to routes by IP address.</p> <p>The module doesn&#39;t reliably restrict a subset of dynamic routes, leading to an access bypass vulnerability. The impact depends on how a site uses this module and whether it has any routes that are dynamic.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-216 https://db.gcve.eu/vuln/fkie_cve-2026-107255 <p>Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.</p> <p>Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107255 https://db.gcve.eu/vuln/ghsa-5rgq-vm4r-fj73 <p>Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.</p> <p>Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.</p> https://db.gcve.eu/vuln/ghsa-5rgq-vm4r-fj73