p PatchFirst

CVE-2026-107309

CVE-2026-107309 · DRUPAL-CONTRIB-2026-212

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

This module enables you to show a breadcrumb trail for taxonomy term hierarchies. The module doesn't sufficiently check for view access of parent terms before rendering the crumb segment. This vulnerability is mitigated by the fact that the setting "Add parent hierarchy" (term\_hierarchy) must be enabled, and at least one term has a term in the parent hierarchy that is unpublished.

Corrección disponible

Publicación
Actualización

Pila tecnológica: php

Productos y versiones afectados

  • drupal/easy_breadcrumb Packagist:https://packages.drupal.org/8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 2.0.11

    Actualiza a 2.0.11

Fuentes originales

Comprueba tu servidor →