{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-0944","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-0944\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-0944\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3177894","id":"3177894","resource":"node"},"field_sa_advisory_id":"001","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:None\/A:None\/CI:Some\/II:None\/E:Theoretical\/TD:Default","field_sa_description":{"value":"\u003Cp\u003EThis module enables allows group managers to invite people into their group.\u003C\/p\u003E\n\u003Cp\u003EThe module doesn\u0027t sufficiently check access under certain circumstances, allowing unauthorized users to access the group\u0027s content.\u003C\/p\u003E\n\u003Cp\u003EThis vulnerability is mitigated by the fact that it only occurs when certain uncommon actions are taken by a user with the permission to create group invites.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/eduardo-morales-alberti\u0022 rel=\u0022nofollow\u0022\u003Eeduardo morales alberti\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/kevinquillen\u0022 rel=\u0022nofollow\u0022\u003EKevin Quillen (kevinquillen)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/lobsterr\u0022 rel=\u0022nofollow\u0022\u003ENikolay Lobachev (lobsterr)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/tunic\u0022 rel=\u0022nofollow\u0022\u003ERicardo Sanz Ante (tunic)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/kevinquillen\u0022 rel=\u0022nofollow\u0022\u003EKevin Quillen (kevinquillen)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the Group Invite module 2.3.x, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/ginvite\/releases\/2.3.9\u0022 rel=\u0022nofollow\u0022\u003EGroup Invite  2.3.9\u003C\/a\u003E\u003C\/li\u003E\n\u003Cli\u003EIf you use the Group Invite module 3.0.x, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/ginvite\/releases\/3.0.4\u0022 rel=\u0022nofollow\u0022\u003EGroup Invite  3.0.4\u003C\/a\u003E\u003C\/li\u003E\n\u003Cli\u003EIf you use the Group Invite module 4.0.x, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/ginvite\/releases\/4.0.4\u0022 rel=\u0022nofollow\u0022\u003EGroup Invite  4.0.4\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Access bypass","field_issue_last_status_change":"1768413213","field_sa_cve":["CVE-2026-0944"],"field_is_psa":"0","field_affected_versions":"\u003C2.3.9 || \u003E=3.0.0 \u003C3.0.4 || \u003E=4.0.0 \u003C4.0.4","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3567133","id":"3567133","resource":"node"},{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3567134","id":"3567134","resource":"node"},{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3567135","id":"3567135","resource":"node"}],"nid":"3567529","vid":"14231431","is_new":false,"type":"sa","title":"Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-001","edit_url":"https:\/\/www.drupal.org\/node\/3567529\/edit","status":"1","promote":"0","sticky":"0","created":"1768413213","changed":"1768413213","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16412416","id":16412416,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16412418","id":16412418,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16412419","id":16412419,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16412420","id":16412420,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16412421","id":16412421,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16412422","id":16412422,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1768413213"}]}