Description
The Allowed Languages module makes it possible to set restrictions on which content a user can edit based on language.
The module doesn't sufficiently protect against using a disallowed language during content creation. This is mitigated by the fact that the user must have access to create content in at least one language.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/allowed_languages | < 2.0.3 | 2.0.3 | DRUPAL-CONTRIB-2026-308 |
Advisories 1
- WID-SEC-2026-4352 Drupal Erweiterungen: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026