Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:06:29 +0000 DRUPAL-CONTRIB-2026-108 https://vulnerability.circl.lu/vuln/drupal-contrib-2026-108 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/datafield</p> <p>This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.</p> <p>The module doesn&#39;t sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/datafield</p> <p>This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints.</p> <p>The module doesn&#39;t sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content.</p> https://vulnerability.circl.lu/vuln/drupal-contrib-2026-108 fkie_cve-2026-81269 https://vulnerability.circl.lu/vuln/fkie_cve-2026-81269 <p>Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.</p> <p>Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-81269 GHSA-rq35-w8f7-p43g https://vulnerability.circl.lu/vuln/ghsa-rq35-w8f7-p43g <p>Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.</p> <p>Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.</p> https://vulnerability.circl.lu/vuln/ghsa-rq35-w8f7-p43g