—
DRUPAL-CONTRIB-2026-114
Details
The Entity PDF module can create a PDF from any entity based on any View mode.
This module does not check entity view access when fetching a PDF route. This could result in a user accessing a PDF of an entity that they should not be able to view.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8 / drupal/entity_pdf
Introduced in:
0 Fixed in: 2.1.5 Upgrade drupal/entity_pdf to 2.1.5 or newer (ecosystem packagist:https://packages.drupal.org/8).