{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-15084","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-15084\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-15084\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/2841106","id":"2841106","resource":"node"},"field_sa_advisory_id":"075","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/drumm\u0022 rel=\u0022nofollow\u0022\u003ENeil Drumm (drumm)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/longwave\u0022 rel=\u0022nofollow\u0022\u003EDave Long (longwave)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Basic\/A:User\/CI:Some\/II:Some\/E:Theoretical\/TD:All","field_sa_description":{"value":"\u003Cp\u003EThis module enables you to use Single Directory Components in site building (views, field formatters, blocks, layouts) and it improves the Developer Experience (DX) with SDC.\u003C\/p\u003E\n\u003Cp\u003EThe module doesn\u0027t sufficiently sanitize the markup passed to components under certain scenarios.\u003C\/p\u003E\n\u003Cp\u003EThis vulnerability is mitigated by the fact that an attacker must be able to create or update content rendered by UI Patterns.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/grimreaper\u0022 rel=\u0022nofollow\u0022\u003EFlorent Torregrosa (grimreaper)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/herved\u0022 rel=\u0022nofollow\u0022\u003EHerv\u00e9 Donner (herved)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/just_like_good_vibes\u0022 rel=\u0022nofollow\u0022\u003EMikael Meulle (just_like_good_vibes)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/pdureau\u0022 rel=\u0022nofollow\u0022\u003EPierre Dureau (pdureau)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/herved\u0022 rel=\u0022nofollow\u0022\u003EHerv\u00e9 Donner (herved)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the UI Patterns module on version 2, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/ui_patterns\/releases\/2.0.17\u0022 rel=\u0022nofollow\u0022\u003EUI Patterns 2.0.17\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Cross site scripting","field_issue_last_status_change":"1783534086","field_sa_cve":["CVE-2026-15084"],"field_is_psa":"0","field_affected_versions":"\u003E=2.0.0 \u003C2.0.17","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3609304","id":"3609304","resource":"node"}],"nid":"3608032","vid":"14421027","is_new":false,"type":"sa","title":"UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-075","edit_url":"https:\/\/www.drupal.org\/node\/3608032\/edit","status":"1","promote":"0","sticky":"0","created":"1783531061","changed":"1783534086","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16671093","id":16671093,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16671094","id":16671094,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16671095","id":16671095,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16671096","id":16671096,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16671097","id":16671097,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16671098","id":16671098,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16671099","id":16671099,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16677310","id":16677310,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1783531061"}]}