Find a vulnerability

{
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003e=1.0.4 \u003c1.0.9"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/mermaid_diagram_field"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003e=1.0.4 \u003c1.0.9"
          },
          "events": [
            {
              "introduced": "1.0.4"
            },
            {
              "fixed": "1.0.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-96384"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/marcus_johansson"
      ],
      "name": "Marcus Johansson (marcus_johansson)"
    }
  ],
  "details": "This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal.\n\nThe module doesn\u0027t sufficiently respect default revision behavior and does not properly limit access to the modal content.\n\nThis vulnerability is mitigated by the fact that an attacker must have the modal display option enabled for the field, or otherwise know the route of the modal and entity ID.",
  "id": "DRUPAL-CONTRIB-2026-180",
  "modified": "2026-09-23T17:10:03.000Z",
  "published": "2026-09-23T17:07:17.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-180"
    }
  ],
  "schema_version": "1.7.0"
}