CVE-2025-3900

Packagist/drupal/colorbox CVE-2025-3900: medium 6.1, EPSS 0.25%

Colorbox is a module that allows Images, and iframed or inline content to be displayed in a modal above the current page.

Action: Upgrade drupal/colorbox to 2.1.3 or later.

composer require drupal/colorbox:2.1.3

Affected

Fixed versions

Sources

• osv: DRUPAL-CONTRIB-2025-041
• nvd: CVE-2025-3900
• https://www.drupal.org/sa-contrib-2025-041

CVE-2025-3900 · published 2025-04-23T16:58:39Z · modified 2026-09-10T03:45:23.947801772Z · JSON