Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-81158 DRUPAL-CONTRIB-2026-113EUVD-2026-70000GHSA-3wf5-7hjw-48cg

Entity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by drupal

Vendor: Drupal Product: Entity API Package: drupal/entity Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal Entity API allows Forceful Browsing. This issue affects Entity API versions: from 0.0.0 to 1.8.0.

Affected products

VendorProductAffectedFixed
Drupal Entity API 0.0.0 – < 1.8.0 1.8.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/entity < 1.8.0 1.8.0 DRUPAL-CONTRIB-2026-113

Advisories 1

References