CVE-2026-114548: ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247
Published Oct 30, 2026
·Updated
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2.
Affected Software
1 affected component
Drupal ImageAPI Optimize WebP>=0.0.0<=2.1.2
Event History
Oct 30, 2026
CVE Published
via MITRE·03:09 AM
Data Sourced
via MITRE·03:09 AM
DescriptionWeakness
Data Sourced
via OSV·03:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments should be prioritized for review?
Deployments using ImageAPI Optimize WebP versions from 0.0.0 through 2.1.2 should be reviewed, particularly where access-control security levels may be incorrectly configured.
2
Does the available information confirm that default configurations are vulnerable?
No. The available information identifies incorrectly configured access-control security levels as part of the issue, but does not state whether default configurations are affected or provide a workaround.