Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-203 (CVE-2026-107264)

    Vulnerability from drupal – Published: 2026-10-07 16:27 – Updated: 2026-10-07 16:27 – Source website
    VLAI
    Details

    The Inline Formatter Field module allows site builders to template and style entities with a field.

    This module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands.

    Credits
    Marcus Johansson (marcus_johansson) www.drupal.org/u/marcus_johansson
    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c4.2.0"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/inline_formatter_field"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c4.2.0"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.2.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-107264"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/marcus_johansson"
      ],
      "name": "Marcus Johansson (marcus_johansson)"
    }
  ],
  "details": "The Inline Formatter Field module allows site builders to template and style entities with a field.\n\nThis module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands.",
  "id": "DRUPAL-CONTRIB-2026-203",
  "modified": "2026-10-07T16:27:03.000Z",
  "published": "2026-10-07T16:27:03.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-203"
    }
  ],
  "schema_version": "1.7.0"
}