Unrated
Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events. This module p...
CVE-2026-114535
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/swiper_formatter |
< 2.1.2 ≥ 3.0.1, < 3.1.0 |
2.1.2 3.1.0 |
Original description The description as published by the source.
Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events.
This module provides a route for displaying published content entities in a dialog. The route does not sufficiently verify the current user's access to the specific entity.
This vulnerability is mitigated by the fact that only rendered output is returned, and field-level access controls are still enforced.
References
- web drupal.org