Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-114535 DRUPAL-CONTRIB-2026-233EUVD-2026-113539GHSA-phjw-hg88-jpj7

Swiper formatter - Moderately critical - Information disclosure - SA-CONTRIB-2026-233

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful Browsing. This issue affects Swiper formatter versions: from 0.0.0 to 2.1.2, from 3.0.1 to 3.1.0.

Affected products

VendorProductAffectedFixed
Drupal Swiper formatter 0.0.0 – < 2.1.2, 3.0.1 – < 3.1.0 2.1.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/swiper_formatter < 2.1.2 · >= 3.0.1, < 3.1.0 2.1.2, 3.1.0 DRUPAL-CONTRIB-2026-233

Advisories 1

References