https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T06:05:07.659279+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-180 DRUPAL-CONTRIB-2026-180 2026-10-23T06:05:07.685564+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/mermaid_diagram_field

This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal.

The module doesn't sufficiently respect default revision behavior and does not properly limit access to the modal content.

This vulnerability is mitigated by the fact that an attacker must have the modal display option enabled for the field, or otherwise know the route of the modal and entity ID.

 https://db.gcve.eu/vuln/fkie_cve-2026-96384 fkie_cve-2026-96384 2026-10-23T06:05:07.685632+00:00

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.

 https://db.gcve.eu/vuln/ghsa-h68g-2xqj-xfj8 GHSA-h68g-2xqj-xfj8 2026-10-23T06:05:07.685659+00:00

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.

 https://db.gcve.eu/vuln/wid-sec-w-2026-3554 WID-SEC-W-2026-3554 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-23T06:05:07.685672+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.