SA-CONTRIB-2026-328: Critical severity composer/drupal/mollie vulnerability
Published Nov 11, 2026
·Updated
This module enables you to accept online payments on your website using Mollie. This module doesn't sufficiently validate an incoming webhook call, allowing payments to be applied incorrectly.
Credit
hans rossel (hansrossel)
Affected Software
1 affected componentFixes available
composer/drupal/mollie<2.3.2
2.3.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/drupal/mollieto a version that resolves this vulnerability.Fixed in 2.3.2
Event History
Nov 11, 2026
Advisory Published
via Drupal·12:00 AM
Data Sourced
via Drupal·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which deployments should be prioritized for review?
Prioritize websites using composer/drupal/mollie to accept online payments through Mollie, because payment application can be affected.
2
What impact should responders investigate?
Investigate whether payments may have been applied incorrectly as a result of insufficient validation of incoming webhook calls.