tocsin

CVE-2026-55808

1 advisory.

Packagist/drupal/core CVE-2026-55808: unknown

The JSON:API and REST modules allow you to upload image files to image fields.

Action: Upgrade drupal/core to 10.5.12 or later.

composer require drupal/core:10.5.12
composer require drupal/core:10.6.11
composer require drupal/core:11.2.14
composer require drupal/core:11.3.12
composer require drupal/core:11.1.0
composer require drupal/core:11.2.0

Affected

introducedfixedlast affected
010.5.12-
10.6.010.6.11-
11.2.011.2.14-
11.3.011.3.12-
11.0.011.1.0-
11.1.011.2.0-

Fixed versions

10.5.1210.6.1111.2.1411.3.1211.1.011.2.0

Sources

CVE-2026-55808 · published · modified · JSON