restrict_route_by_ip vulnerabilities

CVEs whose affected-version data names the restrict_route_by_ip package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107255None

5d ago

Restrict route by IP - Critical - Access bypass - SA-CONTRIB-2026-216

Incorrect Authorization vulnerability in Drupal Restrict route by IP allows Forceful Browsing. This issue affects Restrict route by IP versions: from 0.0.0 to 1.3.1, from 2.0.0 to 2.0.1.

▾ SunlitDrupal · Restrict route by IPEPSS 0.14%via CVEORG