Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-11941

Fixed upstream EPSS <1%CVSS 7.5

A vulnerability in Drupal Core allows Excessive Allocation.This issue affects Drupal Core: from 10.2.0 before 10.2.2, from 10.1.0 before 10.1.8.

Published 2024-12-05 · CVE record · OSV

Products: Drupal Core

Fixed upstream

EcosystemPackageFixed in
Packagistdrupal/core10.1.8
Packagistdrupal/core10.2.2

Distro releases

ReleasePackageFixed in
Ubuntu Pro 14.04 LTSdrupal7no fix
Ubuntu Pro 16.04 LTSdrupal7no fix