DRUPAL-CONTRIB-2022-016
Details
**Update** Maintainers stepped forward, fixed the security issue, and Vocabulary Permissions Per Role is supported again.
The module allows adding to/editing terms of/removing terms from vocabularies per role.
The module did not properly check access for certain operations allowing an unauthorized malicious user to view, modify and delete terms.
**Original advisory** The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read: <https://www.drupal.org/node/251466#procedure---own-project---unsupported>
Are you affected?
Enter the version of the package you're using.
Affected packages
0Fixed in: 1.2.0Upgrade drupal/vppr to 1.2.0 or newer (ecosystem packagist:https://packages.drupal.org/8).