tocsin

CVE-2025-3733

1 advisory.

Packagist/drupal/baguettebox CVE-2025-3733: medium 6.5, EPSS 0.25%

The baguetteBox.js module provides integration with baguetteBox.js library.

Action: Upgrade drupal/baguettebox to 2.0.4 or later.

composer require drupal/baguettebox:2.0.4
composer require drupal/baguettebox:3.0.1

Affected

introducedfixedlast affected
02.0.4-
3.0.03.0.1-

Fixed versions

2.0.43.0.1

Sources

CVE-2025-3733 · published · modified · JSON