https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T11:47:12.423126+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/drupal-contrib-2026-106 DRUPAL-CONTRIB-2026-106 2026-10-05T11:47:12.426760+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/commerce_cybersource

This module integrates Drupal Commerce with the CyberSource payment gateway.

The module does not correctly verify the integrity of data returned by the payment provider. A timing attack could allow an attacker to trick the site into registering that payment has been received even if it hasn't.

This issue only affects the Secure Acceptance Hosted Checkout gateway integration.

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-81159 fkie_cve-2026-81159 2026-10-05T11:47:12.426938+00:00

Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.

 https://vulnerability.circl.lu/vuln/ghsa-7q92-q5vc-5r4r GHSA-7q92-q5vc-5r4r 2026-10-05T11:47:12.426999+00:00

Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.