Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-107259 DRUPAL-CONTRIB-2026-200EUVD-2026-113575GHSA-wp6m-582q-3rfp

Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200

Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by drupal

Description

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Linked Field allows Code Injection. This issue affects Linked Field versions: from 0.0.0 to 1.8.0.

Affected products

VendorProductAffectedFixed
Drupal Linked Field 0.0.0 – < 1.8.0 1.8.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/linked_field < 1.8.0 1.8.0 DRUPAL-CONTRIB-2026-200

Advisories 1

References