U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

CWE Statistics for Drupal.org as of 06/05/2025

139
40
 
40
34
Reference
0-69.9%
Contributor
85.0
Contributor
70-94.9%
 
Provider
95-100%
CVE CNA Value Alignment NIST Value Reason
CVE-2020-13674   (1 of 1) Warning CWE-352 CWE-352
CVE-2020-13675   (0 of 1) CWE-284 CWE-434 CWE from CNA not within 1003 View
CVE-2020-13676   (0 of 1) CWE-284 CWE-863 More specific CWE option available
CVE-2022-25271   (1 of 1) Warning CWE-20 CWE-20
CVE-2024-11941   (1 of 1) CWE-835 CWE-835
CVE-2024-12393   (1 of 1) CWE-79 CWE-79
CVE-2024-13237   (1 of 1) CWE-79 CWE-79
CVE-2024-13238   (1 of 1) CWE-79 CWE-79
CVE-2024-13243   (1 of 1) CWE-862 CWE-862
CVE-2024-13244   (1 of 1) CWE-352 CWE-352
CVE-2024-13247   (1 of 1) CWE-79 CWE-79
CVE-2024-13250   (1 of 1) CWE-352 CWE-352
CVE-2024-13252   (1 of 1) CWE-79 CWE-79
CVE-2024-13253   (1 of 1) CWE-863 CWE-863
CVE-2024-13257   (1 of 1) CWE-863 CWE-863
CVE-2024-13258   (1 of 1) CWE-863 CWE-863
CVE-2024-13260   (1 of 1) CWE-352 CWE-352
CVE-2024-55634   (2 of 2) CWE-178 CWE-178
CWE-289 More specific CWE option available
CVE-2024-55635   (1 of 1) CWE-79 CWE-79
CVE-2024-55636   (0 of 1) CWE-915 CWE-502 More specific CWE option available
CVE-2024-55637   (0 of 1) CWE-915 CWE-502 More specific CWE option available
CVE-2024-55638   (0 of 1) CWE-915 CWE-502 More specific CWE option available
CVE-2025-3057   (1 of 1) CWE-79 CWE-79
CVE-2025-3130   (1 of 1) CWE-79 CWE-79
CVE-2025-3131   (1 of 1) CWE-352 CWE-352
CVE-2025-3474   (1 of 1) CWE-306 CWE-306
CVE-2025-3475   (2 of 2) CWE-770 CWE-770
CWE-863 More specific CWE option available
CVE-2025-31673   (1 of 1) CWE-863 CWE-863
CVE-2025-31674   (1 of 1) CWE-915 CWE-913
CVE-2025-31675   (1 of 1) CWE-79 CWE-79
CVE-2025-31676   (0 of 1) CWE-1390 CWE-307 Not enough information to confidently identify CWE ("NVD-CWE-Insufficient-Info" selected)
CVE-2025-31677   (1 of 1) CWE-352 CWE-352
CVE-2025-31678   (1 of 1) CWE-862 CWE-862
CVE-2025-31679   (1 of 1) CWE-79 CWE-79
CVE-2025-31680   (1 of 1) CWE-352 CWE-352
CVE-2025-31681   (1 of 1) CWE-862 CWE-862
CVE-2025-31682   (1 of 1) CWE-79 CWE-79
CVE-2025-31683   (1 of 1) CWE-352 CWE-352
CVE-2025-31692   (1 of 1) CWE-78 CWE-78
CVE-2025-31693   (1 of 1) CWE-78 CWE-78