Skip to content

drupal/commerce_product_alternative vulnerabilities (Packagist)

1 vulnerability.

drupal/commerce_product_alternative PackagistThis module lets customers replace an item in their cart with one of the alternative product variations listed for it. The module does not check that a cart belongs to the current visitor when the vis…CVE-2026-122070Fix availableNo scoreNovember 4, 2026