https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 23:16:58 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-264 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/commerce_stripe</p> <p>This module enables you to take payments via multiple Stripe APIs.</p> <p>The module doesn&#39;t sufficiently verify the cryptographic signature of a webhook event when a signing secret has not been properly configured in the payment gateway settings.</p> <p>This vulnerability is mitigated by the fact that not all payment gateway plugins in the module utilize webhooks. Furthermore, any payment gateway configuration with any value for its webhook signing secret will prevent inappropriate processing.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/commerce_stripe</p> <p>This module enables you to take payments via multiple Stripe APIs.</p> <p>The module doesn&#39;t sufficiently verify the cryptographic signature of a webhook event when a signing secret has not been properly configured in the payment gateway settings.</p> <p>This vulnerability is mitigated by the fact that not all payment gateway plugins in the module utilize webhooks. Furthermore, any payment gateway configuration with any value for its webhook signing secret will prevent inappropriate processing.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-264 https://db.gcve.eu/vuln/fkie_cve-2026-118559 <p>Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.</p> <p>Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.</p> https://db.gcve.eu/vuln/fkie_cve-2026-118559 https://db.gcve.eu/vuln/ghsa-w776-25r7-2258 <p>Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.</p> <p>Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.</p> https://db.gcve.eu/vuln/ghsa-w776-25r7-2258 https://db.gcve.eu/vuln/wid-sec-w-2026-4230 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4230