Vulnerability DRUPAL-CONTRIB-2026-278

Integration with GroupEx PRO system, decoupled from Open Y.

The module does not sufficiently validate user inputs in some scenarios, potentially leading to arbitrary remote code execution.

Note: This project was marked as Unsupported by the Drupal Security Team on 2026-10-28 but a fix was released and the project restored on 2026-11-04.