drupal/commerce vulnerabilities (Packagist)

10 vulnerabilities.

• drupal/commerce Packagist Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259 CVE-2026-118544 Fix available 3.7 LowOctober 28, 2026
• drupal/commerce Packagist Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258 CVE-2026-118543 Fix available 5.3 MediumOctober 28, 2026
• drupal/commerce Packagist Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257 CVE-2026-118542 Fix available 2.7 LowOctober 28, 2026
• drupal/commerce Packagist Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256 CVE-2026-118541 Fix available 4.3 MediumOctober 28, 2026
• drupal/commerce Packagist Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255 CVE-2026-118540 Fix available 5.3 MediumOctober 28, 2026
• drupal/commerce Packagist Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254 CVE-2026-118539 Fix available 6.5 MediumOctober 28, 2026
• drupal/commerce Packagist Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041 CVE-2026-10769 Fix available 5.4 MediumJune 3, 2026
• drupal/commerce Packagist This module provides a system for building an ecommerce solution in their Drupal site. The module doesn't sufficiently verify access to profile data in certain circumstances. This vulnerability is mit… DRUPAL-CONTRIB-2021-032 Fix available No scoreSeptember 22, 2021
• drupal/commerce Packagist Drupal Commerce is used to build eCommerce websites and applications. It's possible to configure commerce to permit orders by anonymous users. In this configuration, customers who do not choose to cre… DRUPAL-CONTRIB-2020-020 Fix available No scoreMay 27, 2020
• drupal/commerce Packagist This module enables you to build eCommerce websites and applications with Drupal. The module doesn't sufficiently check access for some of its entity types. DRUPAL-CONTRIB-2018-057 Fix available No scoreAugust 29, 2018