Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-114546 DRUPAL-CONTRIB-2026-245EUVD-2026-113527GHSA-ff5h-gcfv-mpvw

Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2.

Affected products

VendorProductAffectedFixed
Drupal Media Alias Display 0.0.0 – < 2.1.2, 3.0.0 – < 3.0.2 2.1.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/media_alias_display < 2.1.2 · >= 3.0.0, < 3.0.2 2.1.2, 3.0.2 DRUPAL-CONTRIB-2026-245

References