Composer drupal/canvas has 4 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2026-3216 | This module enables you to easily theme and build an entire website using only their browser, without the need to write | unknown | 0.0 | <1.1.1 | 1.1.1 |
| CVE-2026-58587 | The Canvas AI submodule allows you to upload image files via a custom API to use within the AI web chat. These file upl | unknown | 0.0 | <1.4.2 or >=1.5.0 <1.5.2 or >=1.6.0 <1.6.1 or >=1.7.0 <1.7.1 | 1.4.2, 1.5.2, 1.6.1, 1.7.1 |
| CVE-2026-58588 | The Canvas module allow you to upload image files via a custom API. The validation rules check the file extension of th | unknown | 0.0 | <1.4.2 or >=1.5.0 <1.5.2 or >=1.6.0 <1.6.1 or >=1.7.0 <1.7.1 | 1.4.2, 1.5.2, 1.6.1, 1.7.1 |
| CVE-2026-1553 | This Drupal Canvas module is a new visual page builder for Drupal. You can create reusable components that match your de | unknown | 0.0 | <1.0.4 | 1.0.4 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked