—

DRUPAL-CONTRIB-2020-035

Details

The File Example submodule within the Examples project does not properly sanitize certain filenames as described in [SA-CORE-2020-012](https://www.drupal.org/sa-core-2020-012), along with other related vulnerabilities.

Therefore, File Example so is being removed from Examples until a version demonstrating file security best practices can added back in the future.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/examples

Introduced in: 1.0.0

No fixed version published yet for drupal/examples. Pin to a known-safe version or switch to an alternative.

References

https://www.drupal.org/sa-contrib-2020-035[WEB]