file_force vulnerabilities

CVEs whose affected-version data names the file_force package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-110176High· 8.7

5d ago

File Force Download for Drupal 7 Access Bypass via Unconditional Download Headers

The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a file URL carries the download query parameter. In Drupal 7, returning a non-empty header array from that hook is itsel…

▾ TwilightDrupal · file_forceEPSS 0.25%via CVEORG