Vulnerability Database · Packagist · backdrop/backdrop · Version
backdrop/backdrop 1.19.1
1.19.1 is affected by 8 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 1 Medium 7 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
backdrop/backdrop 1.19.1 vulnerabilities
8 vulnerabilities cover backdrop/backdrop 1.19.1. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2022-42092: Backdrop CMS Unrestricted File Upload vulnerability | 7.2 high | No fix published | 07 Oct 2022 |
| CVE-2025-63828: Backdrop CMS Host Header Injection Vulnerability | 6.9 medium | No fix published | 18 Nov 2025 |
| CVE-2024-41709: Backdrop CMS Field Label Sanitization Vulnerability | 4.8 medium | 1.27.3 | 22 Jul 2024 |
| CVE-2023-31045: Cross-site Scripting in Backdrop CMS | 4.8 medium | 1.24.2 | 24 Apr 2023 |
| CVE-2022-42095: Cross-site Scripting in Backdrop CMS | 4.8 medium | No fix published | 23 Nov 2022 |
| CVE-2022-42097: Cross-site Scripting in Backdrop CMS | 4.8 medium | No fix published | 22 Nov 2022 |
| CVE-2022-42094: Cross-site Scripting in Backdrop CMS | 4.8 medium | No fix published | 22 Nov 2022 |
| CVE-2022-42096: Cross-site Scripting in Backdrop CMS | 4.8 medium | No fix published | 21 Nov 2022 |
Looking for another version, or everything Vulert holds for backdrop/backdrop?
Questions
About backdrop/backdrop 1.19.1
Is backdrop/backdrop 1.19.1 vulnerable?
Yes. 8 vulnerabilities in the Vulert database cover backdrop/backdrop 1.19.1: 0 critical, 1 high, 7 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor backdrop/backdrop for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the backdrop/backdrop version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.