Vulnerability Database · Packagist · drupal/core · Version
drupal/core 10.6.12
10.6.12 is affected by 9 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 1 High 0 Medium 2 Low 0 Unrated 6
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
drupal/core 10.6.12 vulnerabilities
9 vulnerabilities cover drupal/core 10.6.12. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2011-2715: Drupal SQL Injection vulnerability | 9.8 critical | No fix published | 22 Apr 2022 |
| CVE-2011-2714: Drupal Cross-Site Scripting Vulnerability | 6.1 medium | No fix published | 22 Apr 2022 |
| CVE-2026-108514: Drupal Core Navigation Module XSS Vulnerability | N/A unrated | 10.6.19 | 14 Oct 2026 |
| CVE-2026-108515: Drupal Core Link Module XSS Vulnerability | N/A unrated | 10.6.19 | 14 Oct 2026 |
| CVE-2026-108097: Drupal Core Field UI Module Remote Code Execution Vulnerability | N/A unrated | 10.6.19 | 14 Oct 2026 |
| Critical XSS Vulnerability in CKEditor Used by Drupal Core - Update Required | N/A unrated | 10.6.17 | 16 Sep 2026 |
| CVE-2026-55805: Drupal Core Layout Builder Module XSS Vulnerability | N/A unrated | 10.6.13 | 15 Jul 2026 |
| CVE-2026-15916: Drupal Core Image Module Access Control Vulnerability | N/A unrated | 10.6.13 | 15 Jul 2026 |
| CVE-2024-22362: Drupal Denial of Service vulnerability | N/A medium | No fix published | 16 Jan 2024 |
Looking for another version, or everything Vulert holds for drupal/core?
Questions
About drupal/core 10.6.12
Is drupal/core 10.6.12 vulnerable?
Yes. 9 vulnerabilities in the Vulert database cover drupal/core 10.6.12: 1 critical, 0 high, 2 medium and 0 low, plus 6 not yet rated. Each entry above names the fixed version to move to.
How do I monitor drupal/core for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the drupal/core version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.