Packagist/drupal/core CVE-2021-32610: unknown, EPSS 73.38%

The Drupal project uses the pear Archive\_Tar library, which has released a security update that impacts Drupal.

Action: Upgrade drupal/core to 8.9.17 or later.

composer require drupal/core:8.9.17

composer require drupal/core:9.1.11

composer require drupal/core:9.2.2

Affected

Fixed versions

Sources

• osv: DRUPAL-CORE-2021-004
• https://www.drupal.org/sa-core-2021-004

CVE-2021-32610 · published 2021-07-21T15:59:27Z · modified 2026-09-19T17:45:13Z · JSON