Search
Find a vulnerability
Search criteria
Related vulnerabilities
DRUPAL-CONTRIB-2026-215 (CVE-2026-107312)
Vulnerability from drupal – Published: 2026-10-07 16:39 – Updated: 2026-10-07 17:14 – Source website
VLAI
Details
The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.
The "Email Example" feature implemented by the email_example submodule can be used to send illegitimate emails to arbitrary email addresses.
Therefore, the email_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code.
Credits
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"database_specific": {
"affected_versions": "\u003c4.0.7"
},
"package": {
"ecosystem": "Packagist:https://packages.drupal.org/8",
"name": "drupal/examples"
},
"ranges": [
{
"database_specific": {
"constraint": "\u003c4.0.7"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "4.0.7"
}
],
"type": "ECOSYSTEM"
}
],
"severity": []
}
],
"aliases": [
"CVE-2026-107312"
],
"credits": [
{
"contact": [
"https://www.drupal.org/u/avpaderno"
],
"name": "Alberto Paderno (avpaderno)"
}
],
"details": "The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.\n\nThe \"Email Example\" feature implemented by the email\\_example submodule can be used to send illegitimate emails to arbitrary email addresses.\n\nTherefore, the email\\_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code.",
"id": "DRUPAL-CONTRIB-2026-215",
"modified": "2026-10-07T17:14:03.000Z",
"published": "2026-10-07T16:39:53.000Z",
"references": [
{
"type": "WEB",
"url": "https://www.drupal.org/sa-contrib-2026-215"
}
],
"schema_version": "1.7.0"
}