DRUPAL-CONTRIB-2026-278: Composer/drupal/groupexpro vulnerability

Published Oct 28, 2026

Updated

The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons.

Affected Software

1 affected component

composer/drupal/groupexpro*

Event History

Oct 28, 2026

Advisory Published

via OSV·05:19 PM

Data Sourced

via OSV·05:19 PM

DescriptionAffected Software

Frequently Asked Questions

Is there a fix available for the known security issue?

No fix is identified in the advisory data. The project is marked unsupported because the known security issue has not been fixed by its maintainer.

What should teams using this project do?

Teams should treat the project as unsupported and plan to replace it or otherwise remove their dependency on it. The advisory data does not provide a mitigation or patched version.

DRUPAL-CONTRIB-2026-278: Composer/drupal/groupexpro vulnerability

Affected Software

Event History

Frequently Asked Questions

Is there a fix available for the known security issue?

What should teams using this project do?

Company

Resources

Contact

Frequently Asked Questions

Is there a fix available for the known security issue?

What should teams using this project do?