drupal/canvas vulnerabilities (Packagist)

4 vulnerabilities.

• drupal/canvas Packagist Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066 CVE-2026-58588 Fix available 6.1 MediumJuly 1, 2026
• drupal/canvas Packagist Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065 CVE-2026-58587 Fix available 6.1 MediumJuly 1, 2026
• drupal/canvas Packagist Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017 CVE-2026-3216 Fix available 5.0 MediumFebruary 25, 2026
• drupal/canvas Packagist Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006 CVE-2026-1553 Fix available 4.8 MediumJanuary 28, 2026