CVE-2024-13295: Node Export Project Node Export

Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X-* before 7.X-3.3.

Affected products

• Node Export Project Node Export: from 7.x-3.0, before 7.x-3.3 (fixed in 7.x-3.3)

Published 2025-01-09. Last modified 2026-06-17.