CVE-2025-3901

Packagist/drupal/bootstrap_site_alert CVE-2025-3901: medium 6.1, EPSS 0.25%

This module enables you to put a site wide bootstrap themed alert message on the top of every page.

Action: Upgrade drupal/bootstrap_site_alert to 1.13.0 or later.

composer require drupal/bootstrap_site_alert:1.13.0

composer require drupal/bootstrap_site_alert:3.0.4

Affected

Fixed versions

Sources

• osv: DRUPAL-CONTRIB-2025-042
• nvd: CVE-2025-3901
• https://www.drupal.org/sa-contrib-2025-042

CVE-2025-3901 · published 2025-04-23T16:58:51Z · modified 2026-09-10T03:45:37.112909483Z · JSON