—
DRUPAL-CONTRIB-2026-105
Details
This module enables site administrators to require CAPTCHA confirmation on specific pages.
The module does not sufficiently validate its CAPTCHA verification cookies. Under certain circumstances, an unauthenticated user or automated bot can forge the cookie and bypass CAPTCHA verification entirely.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8 / drupal/captcha_protected_page
Introduced in:
0 Fixed in: 1.0.2 Upgrade drupal/captcha_protected_page to 1.0.2 or newer (ecosystem packagist:https://packages.drupal.org/8).