Filtered by vendor Drupal Subscriptions
Filtered by product Block Ajax Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-107249 1 Drupal 1 Block Ajax 2026-10-30 9.8 Critical
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Block AJAX allows Object Injection. This issue affects Block AJAX versions: from 0.0.0 to 3.0.2.