{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-81167","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-81167\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-81167\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3279409","id":"3279409","resource":"node"},"field_sa_advisory_id":"103","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/akalata\u0022 rel=\u0022nofollow\u0022\u003ESwan Kalata (akalata)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/xjm\u0022 rel=\u0022nofollow\u0022\u003EJess  (xjm)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Basic\/A:User\/CI:Some\/II:Some\/E:Theoretical\/TD:All","field_sa_description":{"value":"\u003Cp\u003EThe Address Suggestion module provides address autocomplete functionality using configured address providers.\u003C\/p\u003E\n\u003Cp\u003EThe module doesn\u0027t sufficiently sanitize address suggestion data returned by configured providers, which can lead to a cross-site scripting (XSS) vulnerability.\u003C\/p\u003E\n\u003Cp\u003EThis vulnerability is mitigated by the fact that an attacker must be able to inject malicious content into data returned by a configured address provider, and a user must perform a search that returns the malicious suggestion.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/cmlara\u0022 rel=\u0022nofollow\u0022\u003EConrad Lara (cmlara)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/josepholstad\u0022 rel=\u0022nofollow\u0022\u003EJoseph Olstad (joseph.olstad)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/lazzyvn\u0022 rel=\u0022nofollow\u0022\u003ENGUYEN Bao (lazzyvn)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/cmlara\u0022 rel=\u0022nofollow\u0022\u003EConrad Lara (cmlara)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the address_suggestion module, upgrade to \u003Ca href=\u0022\/project\/address_suggestion\/releases\/1.0.25\u0022 rel=\u0022nofollow\u0022\u003Eaddress_suggestion 1.0.25\u003C\/a\u003E.\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Cross-site scripting","field_issue_last_status_change":"1787765574","field_sa_cve":["CVE-2026-81167"],"field_is_psa":"0","field_affected_versions":"\u003C1.0.25","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3619314","id":"3619314","resource":"node"}],"nid":"3618903","vid":"14473487","is_new":false,"type":"sa","title":"Address Suggestion - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-103","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-103","edit_url":"https:\/\/www.drupal.org\/node\/3618903\/edit","status":"1","promote":"0","sticky":"0","created":"1787765574","changed":"1787765574","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16746036","id":16746036,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16746037","id":16746037,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16746038","id":16746038,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16746039","id":16746039,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16746040","id":16746040,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16747981","id":16747981,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16747982","id":16747982,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1787765574"}]}