drupal/salesforce vulnerabilities (Packagist)

2 vulnerabilities.

• drupal/salesforce Packagist Salesforce Suite - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-063 CVE-2026-13243 Fix available 4.8 MediumJune 24, 2026
• drupal/salesforce Packagist This module enables Drupal to synchronize entities with Salesforce records. The module includes a page that does not sufficiently protect access rights, resulting in potential information disclosure.… DRUPAL-CONTRIB-2018-078 Fix available No scoreDecember 5, 2018