~ / search / GHSA-jv6r-mj9p-9xff

GHSA-jv6r-mj9p-9xff

Drupal General Data Protection Regulation Cross-Site Request Forgery (CSRF) vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-31689

Packages

EcosystemPackageAffectedFixed in
Packagist drupal/gdpr < 3.0.1 3.0.1
Packagist drupal/gdpr >= 3.1.0, < 3.1.2 3.1.2

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-Site Request Forgery (CSRF) vulnerability in Drupal General Data Protection Regulation allows Cross Site Request Forgery. This issue affects General Data Protection Regulation: from 0.0.0 before 3.0.1, from 3.1.0 before 3.1.2.

References

External links from the advisory. They lead to third-party sites.