View online: https://www.drupal.org/sa-contrib-2026-215 Project: Examples for Developers [1] Project machine name: examples Date: 2026-October-07 Security risk: *Less critical* 8 ∕ 25 AC:Basic/A:User/CI:None/II:None/E:Theoretical/TD:All [2] Vulnerability: Allocation of resources without limits or throttling Affected versions: <4.0.7 Description: The Examples for Developers project aims to provide high-quality, well-documented API examples for a broad range of Drupal core functionality. The "Email Example" feature implemented by the email_example submodule can be used to send illegitimate emails to arbitrary email addresses. Therefore, the email_example sub-module is being removed from Examples for Developers until a version demonstrating security best practices can be added back in the future. Developers who based a new module on this example should review their code. Solution: Any site with the email_example submodule installed should uninstall it immediately. Then, install the latest version of Examples for Developers: * If you are using Examples for Developers 4.0.x, upgrade to Examples for Developers 4.0.7 [3]. Developers who based a new module or custom code on this example should review their code. Reported By: * Alberto Paderno (avpaderno) [4] Fixed By: * Alberto Paderno (avpaderno) [5] * Marco Villegas (marvil07) [6] Coordinated By: * Swan Kalata (akalata) [7] of the Drupal Security Team * Greg Knaddison (greggles) [8] of the Drupal Security Team * Juraj Nemec (poker10) [9] of the Drupal Security Team ------------------------------------------------------------------------------ Contribution record [10] [1] https://www.drupal.org/project/examples [2] https://www.drupal.org/security-team/risk-levels [3] https://www.drupal.org/project/examples/releases/4.0.7 [4] https://www.drupal.org/u/avpaderno [5] https://www.drupal.org/u/avpaderno [6] https://www.drupal.org/u/marvil07 [7] https://www.drupal.org/u/akalata [8] https://www.drupal.org/u/greggles [9] https://www.drupal.org/u/poker10 [10] https://new.drupal.org/contribution-record?source_link=https%3A//www.drupal....