Drupal Composer Vulnerability Affecting Multiple Versions
CVE-2026-11914

5.9MEDIUM

Key Information:

Vendor

Drupal
Status
Composer
Vendor
CVE Published:
10 July 2026

What is CVE-2026-11914?

A vulnerability has been identified in Drupal Composer that may allow unauthorized access or manipulation of Composer configurations. This flaw affects multiple versions of the product, necessitating immediate attention from users to ensure that their systems are secure and up to date. For detailed information on the issue and mitigation steps, refer to the official Drupal Security Advisory.

Affected Version(s)

Composer *.*

References

https://www.drupal.org/sa-contrib-2026-046

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.