p PatchFirst

CVE-2026-114535

CVE-2026-114535 · DRUPAL-CONTRIB-2026-233

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events. This module provides a route for displaying published content entities in a dialog. The route does not sufficiently verify the current user's access to the specific entity. This vulnerability is mitigated by the fact that only rendered output is returned, and field-level access controls are still enforced.

Corrección disponible

Publicación
Actualización

Pila tecnológica: php

Productos y versiones afectados

  • drupal/swiper_formatter Packagist:https://packages.drupal.org/8

    Intervalos de versiones afectados
    • ECOSYSTEM: < 2.1.2
    • ECOSYSTEM: ≥ 3.0.1, < 3.1.0

    Actualiza a 2.1.2; Actualiza a 3.1.0

Fuentes originales

Comprueba tu servidor →