Islandora (Drupal) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-22. Vendor: Drupal.

CVEs of Islandora

• CVE-2026-84916 - CVSS 3.7 (low), 2026-10-22: Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0.
• CVE-2026-3215 - CVSS 5.4 (medium), 2026-03-25: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Islandora allows Cross-Site Scripting (XSS).This…