#D8 Security Bounty

Open on Drupal.org →

⚡️ Live updates comments, jobs, and issues, tagged with #D8 Security Bounty will update issues and activities on this page.

Issues

🐛
Changing password should invalidate all other sessions
Fixed
Drupal core 10.0 — user system
Created about 9 years ago
🇺🇸United States pwolanin
4 months ago
📌
Add validation constraint to `type: label`: disallow HTML markup
Needs work
Drupal core 11.0 — configuration system
Created almost 9 years ago
🇺🇸United States pwolanin
7 months ago
🐛
Config translation needs to be validated on input for XSS (like other t string input)
Needs work
Drupal core 10.1 — config_translation.module
Created about 9 years ago
🇺🇸United States pwolanin
about 1 year ago
🐛
File inclusion weakness in stream wrappers, and StreamWrapperInterface composite constants are not clearly documented or tested for correctness
Needs work
Drupal core 9.5 — file system
Created almost 9 years ago
🇺🇸United States pwolanin
over 1 year ago

Activities

No activities found.

contrib.social Blog FAQ Discussions

Production build 0.69.0 2024