CVE-2026-84918
CVE-2026-84918 · Monobank payment API - Moderately critical - Access bypass - SA-CONTRIB-2026-130
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 to 1.0.3.
CVSS 3.7 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
monobank payment api
- Versions
- ≥ 0.0.0, < 1.0.3: Affected (semver)
Update to 1.0.3
drupal/monobank Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.3
Update to 1.0.3