{"id":"DRUPAL-CONTRIB-2026-215","aliases":["CVE-2026-107312"],"title":"DRUPAL-CONTRIB-2026-215","description":"The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.\n\nThe \"Email Example\" feature implemented by the email\\_example submodule can be used to send illegitimate emails to arbitrary email addresses.\n\nTherefore, the email\\_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code.","severity":"unknown","score":null,"published":"2026-10-07T16:39:53.000Z","modified":"2026-10-07T20:15:08.920Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/examples","ranges":[{"events":[{"introduced":"0"},{"fixed":"4.0.7"}],"type":"ECOSYSTEM","database_specific":{"constraint":"<4.0.7"}}],"versions":[],"fixed":["4.0.7"]}],"references":["https://www.drupal.org/sa-contrib-2026-215"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2026-215","modified":"2026-10-07T20:15:08.920429361Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-215"}],"assessments":[]}