Packagist/drupal/core CVE-2022-31042, CVE-2022-31043: unknown, EPSS 1.99%

*Updated 22:00 UTC 2022-06-10: Added steps to update without `drupal/core-recommended`.*

Action: Upgrade drupal/core to 9.2.21 or later.

composer require drupal/core:9.2.21

composer require drupal/core:9.3.16

Affected

Fixed versions

Sources

• osv: DRUPAL-CORE-2022-011
• https://www.drupal.org/sa-core-2022-011

CVE-2022-31042, CVE-2022-31043 · published 2022-06-10T19:39:02Z · modified 2026-09-19T16:26:39Z · JSON