Unrated
Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows...
CVE-2026-118559
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/commerce_stripe |
< 1.4.0 ≥ 2.0.0, < 2.2.3 |
1.4.0 2.2.3 |
| Drupal | Commerce Stripe |
≥ 0.0.0, < 1.4 ≥ 2.0.0, < 2.2.3 |
1.4 2.2.3 |
Original description The description as published by the source.
Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature Spoof. This issue affects Commerce Stripe versions: from 0.0.0 to 1.4, from 2.0.0 to 2.2.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- web drupal.org
- web nvd.nist.gov
- web github.com