| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/restrict_route_by_ip | ≥ 2.0.0, < 2.0.1< 1.3.1 | 2.0.11.3.1 |
This module enables you to restrict access to routes by IP address.
The module doesn't reliably restrict a subset of dynamic routes, leading to an access bypass vulnerability. The impact depends on how a site uses this module and whether it has any routes that are dynamic.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free