CVE-2026-107312: Examples for Developers - Less critical - Allocation of resources without limits or throttling - SA-CONTRIB-2026-215

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-30 · updated 2026-10-30
Weakness: CWE-770

Description

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive Allocation. This issue affects Examples for Developers versions: from 0.0.0 to 4.0.7.

Affected products

Drupal Examples for Developers: before 4.0.7 — fixed in 4.0.7

How to fix

Upgrade to a fixed version: Drupal Examples for Developers 4.0.7. Check the vendor advisory for mitigations.

References

https://www.drupal.org/sa-contrib-2026-215

Get alerted when CVE-2026-107312 or the next vulnerability affects your stack