drupal/islandora vulnerabilities (Packagist)

3 vulnerabilities.

• drupal/islandora Packagist Islandora does not sufficiently check file update access when processing media source and derivative uploads. A user with permission to update media or create derivatives can submit a crafted request… CVE-2026-122081 Fix available No scoreNovember 4, 2026
• drupal/islandora Packagist Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126 CVE-2026-84916 Fix available 3.7 LowSeptember 2, 2026
• drupal/islandora Packagist Islandora - Moderately critical - Arbitrary file upload, Cross-site scripting - SA-CONTRIB-2026-016 CVE-2026-3215 Fix available 5.4 MediumFebruary 25, 2026