CVE-2026-84917

This module enables you to restrict access to JSON:API routes based on specific user roles. The module doesn't sufficiently enforce access controls u...

Original description

The description as published by the source.

This module enables you to restrict access to JSON:API routes based on specific user roles.

The module doesn't sufficiently enforce access controls under scenarios where a request mimics an XMLHttpRequest.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/jsonapi_role_access

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2"}],"database_specific":{"constraint":"<2.0.2"}}]