Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-215 (CVE-2026-107312)

    Vulnerability from drupal – Published: 2026-10-07 16:39 – Updated: 2026-10-07 17:14 – Source website
    VLAI
    Details

    The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.

    The "Email Example" feature implemented by the email_example submodule can be used to send illegitimate emails to arbitrary email addresses.

    Therefore, the email_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code.


    {
      "affected": [
        {
          "database_specific": {
            "affected_versions": "\u003c4.0.7"
          },
          "package": {
            "ecosystem": "Packagist:https://packages.drupal.org/8",
            "name": "drupal/examples"
          },
          "ranges": [
            {
              "database_specific": {
                "constraint": "\u003c4.0.7"
              },
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.0.7"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "severity": []
        }
      ],
      "aliases": [
        "CVE-2026-107312"
      ],
      "credits": [
        {
          "contact": [
            "https://www.drupal.org/u/avpaderno"
          ],
          "name": "Alberto Paderno (avpaderno)"
        }
      ],
      "details": "The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.\n\nThe \"Email Example\" feature implemented by the email\\_example submodule can be used to send illegitimate emails to arbitrary email addresses.\n\nTherefore, the email\\_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code.",
      "id": "DRUPAL-CONTRIB-2026-215",
      "modified": "2026-10-07T17:14:03.000Z",
      "published": "2026-10-07T16:39:53.000Z",
      "references": [
        {
          "type": "WEB",
          "url": "https://www.drupal.org/sa-contrib-2026-215"
        }
      ],
      "schema_version": "1.7.0"
    }