CVE-2026-107260

Packagist/drupal/sector CVE-2026-107260: unknown

Sector is a distribution targeted towards Drupal site builders and site owners who are looking for a fully configured Drupal project out of the box.

Action: Upgrade drupal/sector to 10.3.3 or later.

composer require drupal/sector:10.3.3

composer require drupal/sector:10.4.2

Affected

Fixed versions

Sources

• osv: DRUPAL-CONTRIB-2026-229
• https://www.drupal.org/sa-contrib-2026-229

CVE-2026-107260 · published 2026-10-21T17:43:58Z · modified 2026-10-21T18:15:02.577863642Z · JSON