| Package | Affected versions | Patched versions |
|---|---|---|
| aes encryption | ≥ 7.x-1.4, ≤ 7.x-1.10≥ 8.x-2.1, ≤ 8.x-2.4 |
The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-CONTRIB-2017-027. NOTE: This project is not covered by Drupal's security advisory policy.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free