{"id":"DRUPAL-CONTRIB-2026-189","aliases":["CVE-2026-96380"],"title":"DRUPAL-CONTRIB-2026-189","description":"This module lets a frontend scanner post CSS-usage measurements to the site so admin reports can show real-page statistics.\n\nThis module doesn't sufficiently protect the `/css-usage-analyzer/save` endpoint against forged or repeated submissions.","severity":"unknown","score":null,"published":"2026-09-23T17:22:38.000Z","modified":"2026-09-23T19:15:05.731Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/css_usage_analyzer","ranges":[{"events":[{"introduced":"1.0.0"},{"fixed":"1.0.2"}],"type":"ECOSYSTEM","database_specific":{"constraint":">=1.0.0 <1.0.2"}}],"versions":[],"fixed":["1.0.2"]}],"references":["https://www.drupal.org/sa-contrib-2026-189"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2026-189","modified":"2026-09-23T19:15:05.731068817Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-189"}],"assessments":[]}