Vulnerability DRUPAL-CONTRIB-2026-044

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 months ago
June 10, 2026 at 05:07 PM UTC
No summary available

Details

The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.

The "Read from a file" feature implemented by the file_example submodule can be used to expose any file that PHP can access. Therefore, the file_example sub-module is being removed from Examples for Developers until a version demonstrating file security best practices can be added back in the future. Developers who based a new module on this example should review their code for an access bypass.

Impacted packages

Timeline

Published
3 months ago
June 10, 2026 at 05:07 PM UTC
Last Modified
28 days ago
September 10, 2026 at 03:45 AM UTC