Skip to content
OpenAdvisories
Low · 3.5 CVE-2026-96384 DRUPAL-CONTRIB-2026-180EUVD-2026-107821GHSA-h68g-2xqj-xfj8

Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.

Affected products

VendorProductAffectedFixed
Drupal Mermaid Diagram Field 1.0.4 – < 1.0.9 1.0.9

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/mermaid_diagram_field >= 1.0.4, < 1.0.9 1.0.9 DRUPAL-CONTRIB-2026-180

Advisories 1

References