—
DRUPAL-CORE-2021-010
Quick fix
DRUPAL-CORE-2021-010 — drupal/core: upgrade to the fixed version with the command below.
composer require drupal/core:^8.9.19Details
Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass.
Sites that do not have the JSON:API module enabled are not affected.
This advisory is not covered by [Drupal Steward](/steward).
Are you affected?
Enter the version of the package you're using.