Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-107311 DRUPAL-CONTRIB-2026-214EUVD-2026-113561GHSA-wm34-8fvp-f9p7

Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214

Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by drupal

Description

Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful Browsing. This issue affects Permissions by Term versions: from 0.0.0 to 3.1.41.

Affected products

VendorProductAffectedFixed
Drupal Permissions by Term 0.0.0 – < 3.1.41 3.1.41

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/permissions_by_term < 3.1.41 3.1.41 DRUPAL-CONTRIB-2026-214

Advisories 1

References