DRUPAL-CONTRIB-2025-015
Withdrawn 2026-03-18. This finding no longer applies and is kept for reference. It is not used when checking packages.
Details
Open Social is a Drupal distribution for online communities, which ships with a default module to invite users to groups and events.
Invites for a specific user can be seen under certain conditions.
The issue is mitigated for events by the fact that social\_event\_max\_enroll has to be enabled.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/social
Introduced in:
0Fixed in: 12.3.11Upgrade drupal/social to 12.3.11 or newer (ecosystem packagist:https://packages.drupal.org/8).