https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T12:06:31.842214+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/drupal-contrib-2026-108 DRUPAL-CONTRIB-2026-108 2026-09-28T12:06:31.863119+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/datafield

This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.

The module doesn't sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-81269 fkie_cve-2026-81269 2026-09-28T12:06:31.863245+00:00

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.

 https://vulnerability.circl.lu/vuln/ghsa-rq35-w8f7-p43g GHSA-rq35-w8f7-p43g 2026-09-28T12:06:31.863320+00:00

Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.