CVE-2025-4416
Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059
Summary
Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059
Original description
The description as published by the source.
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1.11, from 4.0.0 before 4.0.2.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/events_log_track
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.11"}],"database_specific":{"constraint":"<3.1.11"}},{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.0.2"}],"database_specific":{"constraint":">=4.0.0 <4.0.2"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org