PT-2025-41620 · Drupal+1 · Drupal+1

Published 2025-10-10 · Updated 2026-01-05 · CVE-2025-9552

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Synchronize composer.Json With Contrib Modules versions .

Description A flaw exists in Drupal Synchronize composer.Json With Contrib Modules. The specific nature of the issue is not detailed in the provided information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-9552

Affected Products

Drupal

Composer.Json

References · 6

• https://drupal.org/sa-contrib-2025-102 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9552 · Security Note
• https://t.me/CVEtracker/34634 · Telegram Post
• https://twitter.com/CVEnew/status/1976780275850838361 · Twitter Post
• https://t.me/cveNotify/138300 · Telegram Post
• https://t.me/cveNotify/147714 · Telegram Post