Skip to content

drupal/commerce_escrow vulnerabilities (Packagist)

1 vulnerability.

drupal/commerce_escrow PackagistThis module enables you to accept payments through Escrow.com with Drupal Commerce. The module doesn't sufficiently verify incoming Escrow.com webhook notifications. An attacker can forge payment and…CVE-2026-122071Fix availableNo scoreNovember 4, 2026