CVE-2025-31685
1 advisory.
Packagist/goalgorilla/open_social CVE-2025-31685: critical 9.1
Drupal Open Social Missing Authorization vulnerability
Action: Upgrade goalgorilla/open_social to 12.3.11 or later.
composer require goalgorilla/open_social:12.3.11composer require goalgorilla/open_social:12.4.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 12.3.11 | - |
| 12.4.0 | 12.4.10 | - |
Fixed versions
| 12.3.11 | 12.4.10 |
Sources
- osv: GHSA-gf72-h4cp-wcm4
- https://nvd.nist.gov/vuln/detail/CVE-2025-31685
- https://github.com/goalgorilla/open_social/commit/52c531e156fb8653e47ab99df432c4fb9651f36e
- https://github.com/goalgorilla/open_social/commit/6ebeed01c83dc4947a5c3689bc33b4deca574473
- https://github.com/goalgorilla/open_social
- https://www.drupal.org/sa-contrib-2025-014
CVE-2025-31685 · published · modified · JSON