Project: 
Examples for Developers
Project machine name: 
examples
Date: 
2026-October-07
Security risk: 
Less critical 8 ∕ 25 AC:Basic/A:User/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: 
Allocation of resources without limits or throttling
Affected versions: 
<4.0.7
CVE IDs: 
CVE-2026-107312
Description: 

The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality.

The "Email Example" feature implemented by the email_example submodule can be used to send illegitimate emails to arbitrary email addresses.

Therefore, the email_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code.

Solution: 

Any site with the email_example submodule installed should uninstall it immediately. Then, install the latest version of Examples for Developers:

Developers who based a new module or custom code on this example should review their code.

Reported By: 
Fixed By: 
Coordinated By: