GHSA-fg8x-q69g-4qp3

Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-10929

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	drupal/reverse_proxy_header	< 1.1.2	1.1.2

Details

As written in the advisory (Markdown source, shown as plain text).

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This issue affects Reverse Proxy Header: from 0.0.0 before 1.1.2.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2025-10929 advisory
https://www.drupal.org/sa-contrib-2025-111 web