https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 06:23:27 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-194 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/entity_reference_manager</p> <p>Entity Reference Manager is an advanced administrative module for Drupal that allows site administrators to identify, analyze, and replace entity references across the system.</p> <p>The module does not sufficiently restrict access to all entity management operations. Users who can view content can access the entity merge functionality and delete arbitrary nodes, taxonomy terms, or media entities.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/entity_reference_manager</p> <p>Entity Reference Manager is an advanced administrative module for Drupal that allows site administrators to identify, analyze, and replace entity references across the system.</p> <p>The module does not sufficiently restrict access to all entity management operations. Users who can view content can access the entity merge functionality and delete arbitrary nodes, taxonomy terms, or media entities.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-194 https://db.gcve.eu/vuln/fkie_cve-2026-107251 <p>Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue affects Entity Reference Manager (Merge entities) versions: from 0.0.0 to 1.0.3.</p> <p>Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue affects Entity Reference Manager (Merge entities) versions: from 0.0.0 to 1.0.3.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107251 https://db.gcve.eu/vuln/ghsa-j2m9-55qr-cp4m <p>Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue affects Entity Reference Manager (Merge entities) versions: from 0.0.0 to 1.0.3.</p> <p>Incorrect Authorization vulnerability in Drupal Entity Reference Manager (Merge entities) allows Forceful Browsing. This issue affects Entity Reference Manager (Merge entities) versions: from 0.0.0 to 1.0.3.</p> https://db.gcve.eu/vuln/ghsa-j2m9-55qr-cp4m