—
DRUPAL-CONTRIB-2021-003
Details
This module enables you to add groups to other groups in a tree structure where access can be inherited up or down the tree.
When you configure Subgroup to have a tree with at least three levels, users may inadvertently get permissions in a group that is an uncle or cousin of the source group, rather than a direct ancestor or descendant. Trees with only multiple nodes at the lowest tier (or nowhere) are unaffected.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/subgroup
Introduced in:
1.0.0No fixed version published yet for drupal/subgroup. Pin to a known-safe version or switch to an alternative.