Skip to content
OpenAdvisories

Package · Packagist

drupal/datafield

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Low 3.5
    CVE-2026-114555

    Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250

    Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field allows Stored XSS. This issue affects Data field versions: from 0.0.0 to 2.0.14.

    Drupal Data field drupal/datafield Packagist
  • Medium 5.3
    CVE-2026-81269

    Data field - Moderately critical - Information disclosure - SA-CONTRIB-2026-108

    Missing Authorization vulnerability in Drupal Data field allows Forceful Browsing. This issue affects Data field versions: from 0.0.0 to 2.0.13.

    Drupal Data field drupal/datafield Packagist
  • Unscored —
    DRUPAL-CONTRIB-2023-040

    The Data Field module provides a way of building field types that are made up of other fields, a simpler alternative to…

    drupal/datafield Packagist