GHSA-xq54-x54m-vcpx
GitHub Security Advisory
Drupal core Denial of Service
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).
Sites that do not use the Comment module are not affected.
Affected Packages
Packagist
drupal/core
Affected versions:
10.1.0
(fixed in 10.1.8)
Packagist
drupal/core
Affected versions:
10.2.0
(fixed in 10.2.2)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: June 18, 2025 6:25 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.