DRUPAL-CONTRIB-2022-006 Update 2022-03-01. New maintainers have volunteered for the project and created a new release which includes fixes for the 3 security issues

Not scored Published

A Drupal module was marked unsupported due to known security issues, which were later fixed in a new release by new maintainers.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
Available

What is DRUPAL-CONTRIB-2022-006?

DRUPAL-CONTRIB-2022-006 is a vulnerability in drupal/tac_lite, published on 25 Jan 2022.

Official description

Update 2022-03-01. New maintainers have volunteered for the project and created a new release which includes fixes for the 3 security issues that caused the module to be unsupported.

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: <https://www.drupal.org/node/251466#procedure—own-project—unsupported>

Which versions are affected by DRUPAL-CONTRIB-2022-006?

Linux distribution packages (1)
drupal/tac_lite Packagist:https://packages.drupal.org/8All versions1.6.0

How do I fix DRUPAL-CONTRIB-2022-006?

Upgrade to a fixed version.

Is DRUPAL-CONTRIB-2022-006 being exploited?

There is no known exploitation of DRUPAL-CONTRIB-2022-006 in the wild and no public exploit code.

Sources

Is DRUPAL-CONTRIB-2022-006 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free