drupal/core-recommended 11.0.5 vulnerabilities

6 advisories known · drupal/core-recommended@11.0.5 · 4 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 11.0.5

SEVERITYADVISORYPUBLISHED
CriticalDrupal core contains a potential PHP Object Injection vulnerabilityGHSA-938f-5r4f-h65vBIT-drupal-2024-55636CVE-2024-55636DRUPAL-CORE-2024-006Affected >=10.3.0 <10.3.9, >=11.0.0 <11.0.8, >=8.8.0 <10.2.11Fixed in 10.2.11Fixed in 10.3.9Fixed in 11.0.8OSV source ↗2 years ago
CriticalDrupal core contains a potential PHP Object Injection vulnerabilityGHSA-w6rx-9g2x-mg5gBIT-drupal-2024-55637CVE-2024-55637DRUPAL-CORE-2024-007Affected >=10.3.0 <10.3.9, >=11.0.0 <11.0.8, >=8.8.0 <10.2.11Fixed in 10.2.11Fixed in 10.3.9Fixed in 11.0.8OSV source ↗2 years ago
MediumDrupal core Access bypassGHSA-7cwc-fjqm-8vh8BIT-drupal-2024-55634CVE-2024-55634DRUPAL-CORE-2024-004Affected >=10.3.0 <10.3.9, >=11.0.0 <11.0.8, >=8.0.0 <10.2.11Fixed in 10.2.11Fixed in 10.3.9Fixed in 11.0.8OSV source ↗2 years ago
MediumDrupal Core Cross-Site Scripting (XSS)GHSA-8mvq-8h2v-j9vfBIT-drupal-2024-12393CVE-2024-12393DRUPAL-CORE-2024-003Affected >=10.3.0 <10.3.9, >=11.0.0 <11.0.8, >=8.8.0 <10.2.11Fixed in 10.2.11Fixed in 10.3.9Fixed in 11.0.8OSV source ↗2 years ago

Does not affect 11.0.5

SEVERITYADVISORYPUBLISHED
CriticalDrupal core contains a potential PHP Object Injection vulnerabilityGHSA-gvf2-2f4g-jqf4BIT-drupal-2024-55638CVE-2024-55638DRUPAL-CORE-2024-008Affected >=10.3.0 <10.3.9, >=7.0 <7.102, >=8.8.0 <10.2.11Fixed in 10.2.11Fixed in 10.3.9Fixed in 7.102OSV source ↗2 years ago
MediumDrupal Full Path DisclosureGHSA-mg8j-w93w-xjgcCVE-2024-45440Affected >=10.3.0 <10.3.6, >=11.0.0 <11.0.5, >=8.0.0 <10.2.9Fixed in 10.2.9Fixed in 10.3.6Fixed in 11.0.5OSV source ↗2 years ago
  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools