DRUPAL-CONTRIB-2026-215
The advisory, in context
The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.
The "Email Example" feature implemented by the email_example submodule can be used to send illegitimate emails to arbitrary email addresses.
Therefore, the email_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
Earlier releases before 4.0.7
Fixed in 4.0.7
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.0.7"
}
],
"type": "ECOSYSTEM",
"database_specific": {
"constraint": "<4.0.7"
}
}
],
"versions": []
}