—
DRUPAL-CONTRIB-2025-106
Details
This module enables you to store and display JSON data using optional 3rd party libraries.
The module doesn't sufficiently filter data using some of the included field formatters leading to a Cross-site Scripting (XSS) vulnerability.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/json_field
Introduced in:
0Fixed in: 1.5.0Upgrade drupal/json_field to 1.5.0 or newer (ecosystem packagist:https://packages.drupal.org/8).