CVE-2026-108514

Unscored

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026

The matching OSV records carry no description.

Carried by container images the latest versions of 2 of 18,137 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
drupal/corecomposer	11.4.8, 11.4.9	10.6.19	2

2 by stars

Chart

Latest

Affected images

Radar Score

drupalhelmforge

1 of the 2 container images this version deploys carry CVE-2026-108514.

Container image	Digest	Package	Fixed in
library/drupal :11.4.8-php8.5-apache-bookworm	dea8cf332565	drupal/core@11.4.8	10.6.19

4,218

drupalquench-drupal

1 of the 2 container images this version deploys carry CVE-2026-108514.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/drupaldigest-pinned	192d7864f7a9	drupal/core@11.4.9	10.6.19

112

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/drupal :11.4.8-php8.5-apache-bookworm	dea8cf332565	drupal/core@11.4.8	10.6.19	1
ghcr.io/quenchworks/images/drupal	192d7864f7a9	drupal/core@11.4.9	10.6.19	1