CVE-2026-87954
This module adds automatic highlighting of taxonomy terms in content. The module doesn't sufficiently check access on taxonomy terms. As a result, an...
Original description
The description as published by the source.
This module adds automatic highlighting of taxonomy terms in content.
The module doesn't sufficiently check access on taxonomy terms. As a result, anonymous users can view any of the site's taxonomy terms at the module's JSON endpoint, including taxonomy terms that are unpublished or otherwise restricted.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/term_glossary
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0"}],"database_specific":{"constraint":"<4.6.0"}}]
References
- web drupal.org