Drupal Synchronize Composer.json With Contrib Modules Vulnerability

A critical vulnerability has been identified in the Drupal module 'Synchronize composer.json With Contrib Modules', affecting all versions. This issue arises because the project is no longer maintained, leaving a known security problem unaddressed. Users of this module are advised to uninstall it.

Impact

The vulnerability allows for a critical security risk, as all non-public data can be accessed and all data can be modified or deleted.

Remediation

Users should uninstall the 'Synchronize composer.json With Contrib Modules' module. Instructions for taking over maintainership are available on the Drupal.org maintainership guide.