Vulnerability DRUPAL-CONTRIB-2026-233
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 hours ago
October 21, 2026 at 05:46 PM UTC
No summary available
<2.1.2, >=3.0.1 <3.1.0
<2.1.2, >=3.0.1 <3.1.0
Details
Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events.
This module provides a route for displaying published content entities in a dialog. The route does not sufficiently verify the current user's access to the specific entity.
This vulnerability is mitigated by the fact that only rendered output is returned, and field-level access controls are still enforced.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
2 hours ago
October 21, 2026 at 05:46 PM UTC
Last Modified
1 hour ago
October 21, 2026 at 06:45 PM UTC