frontend_editing vulnerabilities

CVEs whose affected-version data names the frontend_editing package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-114541None

5d ago

Frontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Frontend Editing allows Cross Site Request Forgery. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

▾ SunlitDrupal · Frontend EditingEPSS 0.10%via CVEORG

CVE-2026-114553None

5d ago

Frontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241

Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful Browsing. This issue affects Frontend Editing versions: from 0.0.0 to 1.9.3.

▾ SunlitDrupal · Frontend EditingEPSS 0.14%via CVEORG