—
DRUPAL-CONTRIB-2026-186
Details
This module enables you to retrieve and submit webforms via REST.
The module doesn't sufficiently check permission to webform and webform submission entities when retrieving webform elements or fields.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/webform_rest
Introduced in:
0Fixed in: 4.2.1Upgrade drupal/webform_rest to 4.2.1 or newer (ecosystem packagist:https://packages.drupal.org/8).