feat: update advisories

advisories/ai_provider_amazeeio/DRUPAL-CONTRIB-2026-134.json

@@ -0,0 +1,66 @@
+{
+  "schema_version": "1.7.0",
+  "id": "DRUPAL-CONTRIB-2026-134",
+  "modified": "2026-09-09T17:14:57.000Z",
+  "published": "2026-09-09T17:14:00.000Z",
+  "aliases": [
+    "CVE-2026-87936"
+  ],
+  "details": "This module integrates amazee.ai's AI services into Drupal, including a Postgres/pgvector vector database backend for use with Search API AI Search.\n\nThe module doesn't sufficiently sanitize filter values before using them to build SQL queries in its Postgres/pgvector backend, allowing SQL injection.\n\nThis vulnerability is mitigated by the fact that a site must be using the module's Postgres/pgvector vector database backend for a Search API AI Search index, and must expose one of that index's non-string fields as a filter (for example, through a View) that is reachable by the attacker.",
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist:https://packages.drupal.org/8",
+        "name": "drupal/ai_provider_amazeeio"
+      },
+      "severity": [],
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.3.7"
+            }
+          ],
+          "database_specific": {
+            "constraint": "<1.3.7"
+          }
+        },
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.4.0"
+            },
+            {
+              "fixed": "1.4.3"
+            }
+          ],
+          "database_specific": {
+            "constraint": ">=1.4.0 <1.4.3"
+          }
+        }
+      ],
+      "database_specific": {
+        "affected_versions": "<1.3.7 || >=1.4.0 <1.4.3"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-contrib-2026-134"
+    }
+  ],
+  "credits": [
+    {
+      "name": "Matan Kotick (matank001)",
+      "contact": [
+        "https://www.drupal.org/u/matank001"
+      ]
+    }
+  ]
+}

advisories/cas_server/DRUPAL-CONTRIB-2026-135.json

@@ -0,0 +1,66 @@
+{
+  "schema_version": "1.7.0",
+  "id": "DRUPAL-CONTRIB-2026-135",
+  "modified": "2026-09-09T17:15:40.000Z",
+  "published": "2026-09-09T17:15:40.000Z",
+  "aliases": [
+    "CVE-2026-87937"
+  ],
+  "details": "This module enables you to turn a Drupal install into the Central Authentication System (CAS) Server. It makes your database the primary location for other systems to use for authentication in a SSO environment.\n\nThe module doesn't sufficiently check the service URL used to redirect the user during logout, leading to an open redirect.\n\nThis vulnerability is mitigated by the fact that an attacker must convince a user to click a specially crafted link. The vulnerability cannot be exploited without user interaction and does not allow an attacker to directly compromise the CAS server or bypass authentication.",
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist:https://packages.drupal.org/8",
+        "name": "drupal/cas_server"
+      },
+      "severity": [],
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.0.4"
+            }
+          ],
+          "database_specific": {
+            "constraint": "<2.0.4"
+          }
+        },
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "2.1.0"
+            },
+            {
+              "fixed": "2.1.3"
+            }
+          ],
+          "database_specific": {
+            "constraint": ">=2.1.0 <2.1.3"
+          }
+        }
+      ],
+      "database_specific": {
+        "affected_versions": "<2.0.4 || >=2.1.0 <2.1.3"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-contrib-2026-135"
+    }
+  ],
+  "credits": [
+    {
+      "name": "Kalle Kipin\u00e4 (kekkis)",
+      "contact": [
+        "https://www.drupal.org/u/kekkis"
+      ]
+    }
+  ]
+}

advisories/csp_log/DRUPAL-CONTRIB-2026-136.json

@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.7.0",
+  "id": "DRUPAL-CONTRIB-2026-136",
+  "modified": "2026-09-09T17:16:33.000Z",
+  "published": "2026-09-09T17:16:33.000Z",
+  "aliases": [
+    "CVE-2026-87938"
+  ],
+  "details": "The CSP Log module enhances any module that adds the CSP header to a site, by providing a reporting endpoint, custom storage, and aggregated reports that can be used to trace issues or adapt the CSP headers.\n\nThe module did not sufficiently sanitize user-supplied values used in database queries, resulting in an SQL injection vulnerability.\n\nThis vulnerability is mitigated by the fact that an attacker needs access to an account with the *Access CSP reports* permission to exploit the SQL Injection.",
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist:https://packages.drupal.org/8",
+        "name": "drupal/csp_log"
+      },
+      "severity": [],
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "1.0.2"
+            }
+          ],
+          "database_specific": {
+            "constraint": "<1.0.2"
+          }
+        }
+      ],
+      "database_specific": {
+        "affected_versions": "<1.0.2"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-contrib-2026-136"
+    }
+  ],
+  "credits": [
+    {
+      "name": "eduardo morales alberti",
+      "contact": [
+        "https://www.drupal.org/u/eduardo-morales-alberti"
+      ]
+    }
+  ]
+}

advisories/feed_block/DRUPAL-CONTRIB-2026-137.json

@@ -0,0 +1,66 @@
+{
+  "schema_version": "1.7.0",
+  "id": "DRUPAL-CONTRIB-2026-137",
+  "modified": "2026-09-09T17:16:58.000Z",
+  "published": "2026-09-09T17:16:58.000Z",
+  "aliases": [
+    "CVE-2026-87939"
+  ],
+  "details": "The Feed Block module provides a block content type that displays items pulled from a remote RSS/Atom feed.\n\nThe module does not sufficiently validate or sanitize the RSS feed it generates, resulting in a stored cross-site scripting (XSS) vulnerability.",
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist:https://packages.drupal.org/8",
+        "name": "drupal/feed_block"
+      },
+      "severity": [],
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.0.2"
+            }
+          ],
+          "database_specific": {
+            "constraint": "<2.0.2"
+          }
+        },
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "3.0.0"
+            },
+            {
+              "fixed": "3.0.2"
+            }
+          ],
+          "database_specific": {
+            "constraint": ">=3.0.0 <3.0.2"
+          }
+        }
+      ],
+      "database_specific": {
+        "affected_versions": "<2.0.2 || >=3.0.0 <3.0.2"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-contrib-2026-137"
+    }
+  ],
+  "credits": [
+    {
+      "name": "Marcus Johansson (marcus_johansson)",
+      "contact": [
+        "https://www.drupal.org/u/marcus_johansson"
+      ]
+    }
+  ]
+}

advisories/key_auth/DRUPAL-CONTRIB-2026-138.json

@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.7.0",
+  "id": "DRUPAL-CONTRIB-2026-138",
+  "modified": "2026-09-09T17:17:50.000Z",
+  "published": "2026-09-09T17:17:50.000Z",
+  "aliases": [
+    "CVE-2026-87940"
+  ],
+  "details": "This module enables you to add key-based authentication on a per-user  \nbasis.\n\nThe module doesn't cache per user, potentially allowing an attacker to view another user's authentication keys, if the attacker has the same permissions.\n\nThis vulnerability is mitigated by the fact that the site must have the `dynamic_page_cache` module enabled.",
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist:https://packages.drupal.org/8",
+        "name": "drupal/key_auth"
+      },
+      "severity": [],
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "2.2.4"
+            }
+          ],
+          "database_specific": {
+            "constraint": "<2.2.4"
+          }
+        }
+      ],
+      "database_specific": {
+        "affected_versions": "<2.2.4"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-contrib-2026-138"
+    }
+  ],
+  "credits": [
+    {
+      "name": "Utkarsh Choudhary (sisyphus_ut)",
+      "contact": [
+        "https://www.drupal.org/u/sisyphus_ut"
+      ]
+    }
+  ]
+}

advisories/miniorange_saml/DRUPAL-CONTRIB-2026-141.json

@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.7.0",
+  "id": "DRUPAL-CONTRIB-2026-141",
+  "modified": "2026-09-09T17:19:43.000Z",
+  "published": "2026-09-09T17:19:43.000Z",
+  "aliases": [
+    "CVE-2026-87943"
+  ],
+  "details": "This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.\n\nThe miniorange\\_saml module does not correctly restrict access to certain functionality intended for administrative use. This could allow unauthorized users to access functionality or modify configuration values that should only be available to privileged users.",
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist:https://packages.drupal.org/8",
+        "name": "drupal/miniorange_saml"
+      },
+      "severity": [],
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "3.2.0"
+            }
+          ],
+          "database_specific": {
+            "constraint": "<3.2.0"
+          }
+        }
+      ],
+      "database_specific": {
+        "affected_versions": "<3.2.0"
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://www.drupal.org/sa-contrib-2026-141"
+    }
+  ],
+  "credits": [
+    {
+      "name": "Brian Willows (hsjbrianwillows)",
+      "contact": [
+        "https://www.drupal.org/u/hsjbrianwillows"
+      ]
+    }
+  ]
+}