{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-6871","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-6871\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-6871\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/2871369","id":"2871369","resource":"node"},"field_sa_advisory_id":"033","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/prudloff\u0022 rel=\u0022nofollow\u0022\u003EPierre Rudloff (prudloff)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Basic\/A:User\/CI:Some\/II:Some\/E:Theoretical\/TD:Uncommon","field_sa_description":{"value":"\u003Cp\u003EThis module enables you to obfuscate email addresses in content.\u003C\/p\u003E\n\u003Cp\u003EThe module doesn\u0027t sufficiently sanitize user input via the Twig filter.\u003C\/p\u003E\n\u003Cp\u003EThis vulnerability is mitigated by the fact that it only affects sites using the ROT13 encoding and where an attacker can enter content that is filtered using the module\u0027s Twig filter.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/colorfield\u0022 rel=\u0022nofollow\u0022\u003EChristophe Jossart (colorfield)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/nigelcunningham\u0022 rel=\u0022nofollow\u0022\u003ENigel Cunningham (nigelcunningham)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/prudloff\u0022 rel=\u0022nofollow\u0022\u003EPierre Rudloff (prudloff)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the Obfuscate module, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/obfuscate\/releases\/2.0.2\u0022 rel=\u0022nofollow\u0022\u003EObfuscate 2.0.2\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Cross-site scripting","field_issue_last_status_change":"1776880063","field_sa_cve":["CVE-2026-6871"],"field_is_psa":"0","field_affected_versions":"\u003C2.0.2","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3586152","id":"3586152","resource":"node"}],"nid":"3586329","vid":"14333445","is_new":false,"type":"sa","title":"Obfuscate - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-033","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-033","edit_url":"https:\/\/www.drupal.org\/node\/3586329\/edit","status":"1","promote":"0","sticky":"0","created":"1776880063","changed":"1776880063","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16560953","id":16560953,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16560954","id":16560954,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16560955","id":16560955,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16560956","id":16560956,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16560957","id":16560957,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1776880063"}]}