CVE-2026-96377
CVE-2026-96377 · Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: from 0.0.0 to 1.0.7.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
combined image style
- Versions
- ≥ 0.0.0, < 1.0.7: Affected (semver)
Update to 1.0.7
drupal/combined_image_style Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.7
Update to 1.0.7