Vulnerability DRUPAL-CONTRIB-2026-234
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 hours ago
October 21, 2026 at 05:47 PM UTC
No summary available
<3.1.3
<3.1.3
Details
This module provides a suite of Paragraphs bundles that works within the USWDS framework.
The module's twig templates do not sufficiently sanitize values passed to its markup.
This vulnerability is mitigated by the fact that an attacker must have a role to edit content that uses the paragraph bundles provided by the module.
References
Impacted packages
Timeline
Published
2 hours ago
October 21, 2026 at 05:47 PM UTC
Last Modified
2 hours ago
October 21, 2026 at 06:15 PM UTC