{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3392467","id":"3392467","resource":"node","machine_name":"mermaid_diagram_field"},"field_sa_advisory_id":"180","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/akalata\u0022 rel=\u0022nofollow\u0022\u003ESwan Kalata (akalata)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/bramdriesen\u0022 rel=\u0022nofollow\u0022\u003EBram Driesen (bramdriesen)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/xjm\u0022 rel=\u0022nofollow\u0022\u003EJess  (xjm)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:None\/A:User\/CI:Some\/II:None\/E:Theoretical\/TD:All","field_sa_description":{"value":"\u003Cp\u003EThis module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal.\u003C\/p\u003E\n\u003Cp\u003EThe module doesn\u0027t sufficiently respect default revision behavior and does not properly limit access to the modal content.\u003C\/p\u003E\n\u003Cp\u003EThis vulnerability is mitigated by the fact that an attacker must have the modal display option enabled for the field, or otherwise know the route of the modal and entity ID.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/swirt\u0022 rel=\u0022nofollow\u0022\u003ESteve Wirt (swirt)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/marcus_johansson\u0022 rel=\u0022nofollow\u0022\u003EMarcus Johansson (marcus_johansson)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the Mermaid Diagram Field module, upgrade to \u003Ca href=\u0022\/project\/mermaid_diagram_field\/releases\/1.0.10\u0022 rel=\u0022nofollow\u0022\u003EMermaid Diagram Field 1.0.10\u003C\/a\u003E.\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Access bypass","field_issue_last_status_change":"1790183403","field_sa_cve":["CVE-2026-96384"],"field_is_psa":"0","field_affected_versions":"\u003E=1.0.4 \u003C1.0.9","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3625149","id":"3625149","resource":"node"}],"nid":"3620537","vid":"14500420","is_new":false,"type":"sa","title":"Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-180","edit_url":"https:\/\/www.drupal.org\/node\/3620537\/edit","status":"1","promote":"0","sticky":"0","created":"1790183237","changed":"1790183403","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16755957","id":16755957,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16755958","id":16755958,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16776486","id":16776486,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16776487","id":16776487,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16776488","id":16776488,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16780806","id":16780806,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16781951","id":16781951,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1790183237","sa_risk":[13,"Moderately critical"],"sa_id":"SA-CONTRIB-2026-180"}