Unrated
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site...
CVE-2026-118558
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/commerce_stripe |
≥ 2.0.0, < 2.2.3 |
2.2.3 |
| Drupal | Commerce Stripe |
≥ 2.0.0, < 2.2.3 |
2.2.3 |
Original description The description as published by the source.
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request Forgery. This issue affects Commerce Stripe versions: from 2.0.0 to 2.2.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- web drupal.org
- web nvd.nist.gov
- web github.com