CVE-2026-114530
CVE-2026-114530 · DRUPAL-CONTRIB-2026-227
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Dopup module provides functionality for selecting and working with Webforms. The module does not perform sufficient entity access checking in some cases and may expose the title of private Webforms.
Fix available
- Published
- Updated
Stack: php
Affected products and versions
drupal/dopup Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.7
Update to 1.0.7