{"id":"drupal-security-bc267769d1c2","seq":2021,"kind":"advisory","title":"Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005","url":"https://www.drupal.org/sa-core-2025-005","permalink":"https://vulnpulse.app/items/drupal-security-bc267769d1c2","summary":"Project: Drupal core Project machine name: drupal Date: 2025-November-12 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:None/CI:None/II:Some/E:Theoretical/TD:All Vulnerability: Denial of Service Affected versions: >= 8.0.0 < 10.4.9 || >= 10.5.0 < 10.5.6 || >= 11.0.0 < 11.1.9 || >= 11.2.0 < 11.2.8 CVE IDs: CVE-2025-13080 Description: Drupal Core has a rarely used feature, provided by an underlying library, which allows certain attributes of incoming HTTP requests to be overridden. This functionality can be abused in a way that may cause Drupal to cache response data that it should not.…","severity":"critical","techs":["drupal","php"],"cves":["CVE-2025-13080"],"tags":["security"],"source":{"id":"drupal-security","name":"Drupal Security Advisories"},"published_at":"2025-11-12T18:33:05.000Z","fetched_at":"2026-10-21T16:17:45.699Z"}