CVE-2026-96384
CVE-2026-96384 · Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9.
CVSS 3.5 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
mermaid diagram field
- Versions
- ≥ 1.0.4, < 1.0.9: Affected (semver)
Update to 1.0.9
drupal/mermaid_diagram_field Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: ≥ 1.0.4, < 1.0.9
Update to 1.0.9