Drupal Canvas Project Drupal Canvas — known CVE vulnerabilities

Every CVE whose affected-product data names Drupal Canvas Project Drupal Canvas, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-3216 — CVSS 5.0 (medium): Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal…
• CVE-2026-1553 — CVSS 4.8 (medium): Incorrect Authorization vulnerability in Drupal Drupal Canvas allows Forceful Browsing.This issue affects Drupal Canvas: from 0.0.0 before…