Drupal core - Moderately critical - Denial of Service

PKSA-2gfj-5sh8-j3c5

Affected version: >=8.0.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.3.0|>=8.3.0,<8.4.0|>=8.4.0,<8.5.0|>=8.5.0,<8.6.0|>=8.6.0,<8.7.0|>=8.7.0,<8.8.0|>=8.8.0,<8.9.0|>=8.9.0,<9.0.0|>=9.0.0,<9.1.0|>=9.1.0,<9.2.0|>=9.2.0,<9.3.0|>=9.3.0,<9.4.0|>=9.4.0,<9.5.0|>=9.5.0,<10.0.0|>=10.0.0,<10.1.0|>=10.1.0,<10.1.8|>=10.2.0,<10.2.2

Reported by:
FriendsOfPHP/security-advisories

[CRITICAL] Cache poisoning in drupal/core

PKSA-my7h-svxh-5q3g CVE-2023-5256 GHSA-rjqg-3h9m-fx5x

Affected version: >=10.1.0,<10.1.4|>=10.0.0,<10.0.11|>=8.7.0,<9.5.11

Reported by:
GitHub

[HIGH] Improper input validation in Drupal core

PKSA-fpcy-trdp-tpy2 CVE-2022-25273 GHSA-g36h-4jr6-qmm9

Affected version: >=9.3.0,<9.3.12|>=8.0.0,<9.2.18

Reported by:
GitHub

[MEDIUM] Lack of domain validation in Druple core

PKSA-4j5n-cxxv-ptjc CVE-2022-25276 GHSA-4wfq-jc9h-vpcx

Affected version: >=9.4.0,<9.4.3|>=8.0.0,<9.3.19

Reported by:
GitHub

[HIGH] Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012

PKSA-hy6y-p19f-b5kf CVE-2022-25275 GHSA-xh3v-6f9j-wxw3

Affected version: >=7.0.0,<7.91.0|>=8.9.0,<8.10.0|>=9.0.0,<9.1.0|>=9.1.0,<9.2.0|>=9.2.0,<9.3.0|>=9.3.0,<9.3.19|>=9.4.0,<9.4.3

Reported by:
FriendsOfPHP/security-advisories, GitHub

[HIGH] Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014

PKSA-7q72-qds7-4xyv CVE-2022-25277 GHSA-6955-67hm-vjjq

Affected version: >=8.9.0,<8.10.0|>=9.0.0,<9.1.0|>=9.1.0,<9.2.0|>=9.2.0,<9.3.0|>=9.3.0,<9.3.19|>=9.4.0,<9.4.3

Reported by:
FriendsOfPHP/security-advisories, GitHub

[MEDIUM] Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013

PKSA-gkkw-qh7h-5181 CVE-2022-25278 GHSA-cfh2-7f6h-3m85

Affected version: >=8.0.0,<9.3.19|>=9.4.0,<9.4.3

Reported by:
FriendsOfPHP/security-advisories, GitHub

[HIGH] Improper input validation in Drupal core

PKSA-72rg-qbp7-873g CVE-2022-25271 GHSA-fmfv-x8mp-5767

Affected version: >=7.0.0,<7.88|>=8.0.0,<9.2.13|>=9.3.0,<9.3.6

Reported by:
GitHub

[MEDIUM] Incorrect authorization in Drupal core

PKSA-2tvs-gcpz-cmm6 CVE-2022-25270 GHSA-73q4-j324-2qcc

Affected version: >=8.0.0,<9.2.13|>=9.3.0,<9.3.6

Reported by:
GitHub