Skip to content
OpenAdvisories
High · 7.2 CVE-2026-114524 DRUPAL-CONTRIB-2026-225EUVD-2026-113547GHSA-v2vw-2hfx-2h4m

Custom Formatters - Critical - Remote code execution - SA-CONTRIB-2026-225

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege Escalation. This issue affects Custom Formatters versions: from 0.0.0 to 4.2.1.

Affected products

VendorProductAffectedFixed
Drupal Custom Formatters 0.0.0 – < 4.2.1 4.2.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/custom_formatters < 4.2.1 4.2.1 DRUPAL-CONTRIB-2026-225

Advisories 1

References