Single Content Sync vulnerabilities

2 known vulnerabilities in Single Content Sync from Drupal. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Single Content Sync: Deserialization of Untrusted Data

  CVE-2026-118562Oct 30, 2026Drupal

  Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object Injection. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.

• 7.2 High severity

  Single Content Sync: External Control of File Name or Path

  CVE-2026-118561Oct 30, 2026Drupal

  External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affects Single Content Sync versions: from 0.0.0 to 1.4.19.