Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-118571 DRUPAL-CONTRIB-2026-292EUVD-2026-113682GHSA-frjp-6mrj-g5vq

Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3.

Affected products

VendorProductAffectedFixed
Drupal Media Alias Display 0.0.0 – < 2.1.3, 3.0.0 – < 3.0.3 2.1.3

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/media_alias_display < 2.1.3 · >= 3.0.0, < 3.0.3 2.1.3, 3.0.3 DRUPAL-CONTRIB-2026-292

Advisories 1

References