https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 06:05:08 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-180 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/mermaid_diagram_field</p> <p>This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal.</p> <p>The module doesn&#39;t sufficiently respect default revision behavior and does not properly limit access to the modal content.</p> <p>This vulnerability is mitigated by the fact that an attacker must have the modal display option enabled for the field, or otherwise know the route of the modal and entity ID.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/mermaid_diagram_field</p> <p>This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal.</p> <p>The module doesn&#39;t sufficiently respect default revision behavior and does not properly limit access to the modal content.</p> <p>This vulnerability is mitigated by the fact that an attacker must have the modal display option enabled for the field, or otherwise know the route of the modal and entity ID.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-180 https://db.gcve.eu/vuln/fkie_cve-2026-96384 <p>Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.</p> <p>Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.</p> https://db.gcve.eu/vuln/fkie_cve-2026-96384 https://db.gcve.eu/vuln/ghsa-h68g-2xqj-xfj8 <p>Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.</p> <p>Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.</p> https://db.gcve.eu/vuln/ghsa-h68g-2xqj-xfj8 https://db.gcve.eu/vuln/wid-sec-w-2026-3554 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-3554