—
DRUPAL-CONTRIB-2026-113
상세
The Entity API module extends the Drupal core entity API to provide a unified way to deal with entities and their properties.
The module doesn't correctly apply access controls for JSON:API entity collection endpoints. This exposes an information disclosure vulnerability.
This vulnerability is mitigated by the fact that the JSON:API module must be enabled in combination with the Entity API module.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
Packagist:https://packages.drupal.org/8 / drupal/entity
최초 영향 버전:
0 수정 버전: 1.8.0 Upgrade drupal/entity to 1.8.0 or newer (ecosystem packagist:https://packages.drupal.org/8).