commerce_license vulnerabilities

CVEs whose affected-version data names the commerce_license package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118555None

6d ago

Commerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260

Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful Browsing. This issue affects Commerce License versions: from 0.0.0 to 3.1.1.

▾ SunlitDrupal · Commerce LicenseEPSS 0.15%via CVEORG