pypdf and Drupal: two critical security flaws detected

An overload vulnerability was identified in pypdf caused by an oversized /Length value, and a Cross-Site Request Forgery flaw affects the Drupal Automated Logout module.

Published 9sem1 sourceNotableupdated 4j

Lire en français

≈ 25sSpeed

The fact

Both flaws were analyzed on March 18, 2026 and pose major risks to systems using these components.

Administrators must apply security updates to prevent denial-of-service attacks and session hijacking.

Click the link to read an article on the topic:

GlobalSecurityMag

Explore this topic

pypdf Drupal #pypdf #Drupal #CSRF #surcharge #sécurité

What if you saw the whole news differently?Factae cross-checks hundreds of sources worldwide to keep only the fact, no opinion. Explore the front page.

Follow topic →

Auto-synthesis from 1 media source · identified on May 18, 2026

← Back to home

The fact

Read more

Python libraries: two critical vulnerabilities detected

Python, OpenVPN and Drupal: three critical vulnerabilities detected

Drupal: two critical vulnerabilities bypass access restrictions

Découverte de multiples vulnérabilités dans Cisco RoomOS

Drupal Core: two injection and code execution vulnerabilities detected

Four critical vulnerabilities found in open source software