{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-13241","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-13241\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-13241\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/2130961","id":"2130961","resource":"node"},"field_sa_advisory_id":"061","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Basic\/A:None\/CI:None\/II:Some\/E:Theoretical\/TD:Uncommon","field_sa_description":{"value":"\u003Cp\u003EThe optional Paragraphs Library module allows the reuse of paragraphs in multiple places.\u003Cbr \/\u003E\nThe module doesn\u0027t sufficiently restrict access to direct child paragraphs of library items through API endpoints.\u003Cbr \/\u003E\nThis vulnerability is mitigated by the fact the paragraphs_library module must be in use and general write access to paragraphs through another module must be allowed.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/berdir\u0022 rel=\u0022nofollow\u0022\u003ESascha Grossenbacher (berdir)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/mustafa007\u0022 rel=\u0022nofollow\u0022\u003EMustafa Ahmed (mustafa007)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the Paragraphs module for Drupal 8.x, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/paragraphs\/releases\/8.x-1.21\u0022 rel=\u0022nofollow\u0022\u003EParagraphs 8.x-1.21\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Access bypass","field_issue_last_status_change":"1782326596","field_sa_cve":["CVE-2026-13241"],"field_is_psa":"0","field_affected_versions":"\u003C1.21.0","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3605905","id":"3605905","resource":"node"}],"nid":"3592628","vid":"14405426","is_new":false,"type":"sa","title":"Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-061","edit_url":"https:\/\/www.drupal.org\/node\/3592628\/edit","status":"1","promote":"0","sticky":"0","created":"1782326596","changed":"1782326596","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16601243","id":16601243,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16601244","id":16601244,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16601249","id":16601249,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16601250","id":16601250,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1782326596"}]}