Composer drupal/core-recommended has 6 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2024-45440 | Drupal Full Path Disclosure | medium | 5.3 | >=10.3.0 and <10.3.6 or >=11.0.0 and <11.0.5 or >=8.0.0 and <10.2.9 | 10.3.6, 11.0.5, 10.2.9 |
| CVE-2024-55638 | Drupal core contains a potential PHP Object Injection vulnerability | critical | 9.8 | >=8.8.0 and <10.2.11 or >=10.3.0 and <10.3.9 or >=7.0 and <7.102 | 10.2.11, 10.3.9, 7.102 |
| CVE-2024-55636 | Drupal core contains a potential PHP Object Injection vulnerability | critical | 9.8 | >=8.8.0 and <10.2.11 or >=10.3.0 and <10.3.9 or >=11.0.0 and <11.0.8 | 10.2.11, 10.3.9, 11.0.8 |
| CVE-2024-55637 | Drupal core contains a potential PHP Object Injection vulnerability | critical | 9.8 | >=8.8.0 and <10.2.11 or >=10.3.0 and <10.3.9 or >=11.0.0 and <11.0.8 | 10.2.11, 10.3.9, 11.0.8 |
| CVE-2024-55634 | Drupal core Access bypass | medium | 0.0 | >=8.0.0 and <10.2.11 or >=10.3.0 and <10.3.9 or >=11.0.0 and <11.0.8 | 10.2.11, 10.3.9, 11.0.8 |
| CVE-2024-12393 | Drupal Core Cross-Site Scripting (XSS) | medium | 5.4 | >=8.8.0 and <10.2.11 or >=10.3.0 and <10.3.9 or >=11.0.0 and <11.0.8 | 10.2.11, 10.3.9, 11.0.8 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked