CVE-2026-84917

This module enables you to restrict access to JSON:API routes based on specific user roles. The module doesn't sufficiently enforce access controls u...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

This module enables you to restrict access to JSON:API routes based on specific user roles.

The module doesn't sufficiently enforce access controls under scenarios where a request mimics an XMLHttpRequest.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/jsonapi_role_access

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2"}],"database_specific":{"constraint":"<2.0.2"}}]