single_content_sync vulnerabilities
CVEs whose affected-version data names the single_content_sync package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-118561NoneSingle Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274
External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.
▾ SunlitDrupal · Single Content SyncEPSS 0.15%via CVEORG
CVE-2026-118562NoneSingle Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275
Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.
▾ SunlitDrupal · Single Content SyncEPSS 0.27%via CVEORG