.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

drupal/core-recommended 10.2.9 vulnerabilities

6 advisories known · drupal/core-recommended@10.2.9 · 5 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 10.2.9

SEVERITYADVISORYPUBLISHED

CriticalDrupal core contains a potential PHP Object Injection vulnerabilityGHSA-938f-5r4f-h65vBIT-drupal-2024-55636CVE-2024-55636DRUPAL-CORE-2024-006Affected >=10.3.0 <10.3.9, >=11.0.0 <11.0.8, >=8.8.0 <10.2.11Fixed in 10.2.11 Fixed in 10.3.9 Fixed in 11.0.8OSV source ↗2 years ago

CriticalDrupal core contains a potential PHP Object Injection vulnerabilityGHSA-gvf2-2f4g-jqf4BIT-drupal-2024-55638CVE-2024-55638DRUPAL-CORE-2024-008Affected >=10.3.0 <10.3.9, >=7.0 <7.102, >=8.8.0 <10.2.11Fixed in 10.2.11 Fixed in 10.3.9 Fixed in 7.102OSV source ↗2 years ago

CriticalDrupal core contains a potential PHP Object Injection vulnerabilityGHSA-w6rx-9g2x-mg5gBIT-drupal-2024-55637CVE-2024-55637DRUPAL-CORE-2024-007Affected >=10.3.0 <10.3.9, >=11.0.0 <11.0.8, >=8.8.0 <10.2.11Fixed in 10.2.11 Fixed in 10.3.9 Fixed in 11.0.8OSV source ↗2 years ago

MediumDrupal core Access bypassGHSA-7cwc-fjqm-8vh8BIT-drupal-2024-55634CVE-2024-55634DRUPAL-CORE-2024-004Affected >=10.3.0 <10.3.9, >=11.0.0 <11.0.8, >=8.0.0 <10.2.11Fixed in 10.2.11 Fixed in 10.3.9 Fixed in 11.0.8OSV source ↗2 years ago

MediumDrupal Core Cross-Site Scripting (XSS)GHSA-8mvq-8h2v-j9vfBIT-drupal-2024-12393CVE-2024-12393DRUPAL-CORE-2024-003Affected >=10.3.0 <10.3.9, >=11.0.0 <11.0.8, >=8.8.0 <10.2.11Fixed in 10.2.11 Fixed in 10.3.9 Fixed in 11.0.8OSV source ↗2 years ago

Does not affect 10.2.9

SEVERITYADVISORYPUBLISHED

MediumDrupal Full Path DisclosureGHSA-mg8j-w93w-xjgcCVE-2024-45440Affected >=10.3.0 <10.3.6, >=11.0.0 <11.0.5, >=8.0.0 <10.2.9Fixed in 10.2.9 Fixed in 10.3.6 Fixed in 11.0.5OSV source ↗2 years ago