How many project drupal CVEs are in CISA KEV?

Yes — 1 of project drupal's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for project drupal vulnerabilities?

Yes — 1 of project drupal's CVEs have a known public exploit.

Which versions of project drupal are affected?

20 distinct project drupal versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in project drupal CVEs?

project drupal's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes).

How many critical project drupal vulnerabilities are there?

project drupal has 1 critical and 0 high-severity CVEs.

What is the average severity of project drupal CVEs?

The average CVSS base score across project drupal's scored CVEs is 7.2.

project drupal Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: project drupal vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

project drupal Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

project drupal has 4 published CVE records since 2026, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

Severity and exploitation

How the CVSS severity of project drupal's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of project drupal's CVEs is confirmed exploited in the wild.

Public exploits

One of project drupal's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every project drupal version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

11.3.0 <= v < 11.3.73 CVEs
10.6.0 <= v < 10.6.72 CVEs
11.0.0 <= v < 11.2.112 CVEs
8.0.0 <= v < 10.5.92 CVEs
10.5.0 <= v < 10.5.101 CVE
10.6.0 <= v < 10.6.91 CVE
11.0.0 <= v < 11.1.101 CVE
11.2.0 <= v < 11.2.121 CVE
11.3.0 <= v < 11.3.101 CVE
8.9.0 <= v < 10.4.101 CVE

Fixed in

Common weakness types

The CWE weakness categories most often found in project drupal CVEs. Follow any weakness for its full explanation.

Other project products

Browse vulnerabilities for other products by project.

convec1 CVEs

All project vulnerabilities

Frequently asked questions

Common questions about project drupal vulnerabilities.

How many CVEs does project drupal have?: project drupal has 4 published CVE records since 2026.
How many project drupal CVEs are in CISA KEV?: Yes — 1 of project drupal's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for project drupal vulnerabilities?: Yes — 1 of project drupal's CVEs have a known public exploit.
Which versions of project drupal are affected?: 20 distinct project drupal versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in project drupal CVEs?: project drupal's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes).
How many critical project drupal vulnerabilities are there?: project drupal has 1 critical and 0 high-severity CVEs.
What is the average severity of project drupal CVEs?: The average CVSS base score across project drupal's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track project drupal vulnerabilities

Get an alert for each new project drupal CVE, with AI-written analysis and remediation steps.

Create an account See pricing