{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/1943252","id":"1943252","resource":"node","machine_name":"country"},"field_sa_advisory_id":"211","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/akalata\u0022 rel=\u0022nofollow\u0022\u003ESwan Kalata (akalata)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/damienmckenna\u0022 rel=\u0022nofollow\u0022\u003EDamien McKenna (damienmckenna)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Complex\/A:Admin\/CI:Some\/II:Some\/E:Theoretical\/TD:Uncommon","field_sa_description":{"value":"\u003Cp\u003EThe module Country provides a dedicated field type for Drupal core\u0027s official country list.\u003C\/p\u003E\n\u003Cp\u003EThe module does not sufficiently escape user input in its autocomplete widget, which can lead to a cross site scripting vulnerability. \u003C\/p\u003E\n\u003Cp\u003EThis vulnerability is mitigated by the fact that it can not occur out of the box with the Country module, additional module(s) or custom code is required.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/batigolix\u0022 rel=\u0022nofollow\u0022\u003EBoris Doesborg (batigolix)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/cmlara\u0022 rel=\u0022nofollow\u0022\u003EConrad Lara (cmlara)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/cmlara\u0022 rel=\u0022nofollow\u0022\u003EConrad Lara (cmlara)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the Country module 2.2.x, upgrade to \u003Ca href=\u0022\/project\/country\/releases\/2.2.1\u0022 rel=\u0022nofollow\u0022\u003ECountry 2.2.1\u003C\/a\u003E.\u003C\/li\u003E\n\u003Cli\u003EIf you use the Country module 2.1.x, upgrade to \u003Ca href=\u0022\/project\/country\/releases\/2.1.3\u0022 rel=\u0022nofollow\u0022\u003ECountry 2.1.3\u003C\/a\u003E.\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Cross-site scripting","field_issue_last_status_change":"1791390977","field_sa_cve":["CVE-2026-107308"],"field_is_psa":"0","field_affected_versions":"\u003C2.1.3 || \u003E=2.2.0 \u003C2.2.1","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3629133","id":"3629133","resource":"node"},{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3629134","id":"3629134","resource":"node"}],"nid":"3626046","vid":"14514994","is_new":false,"type":"sa","title":"Country - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-211","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-211","edit_url":"https:\/\/www.drupal.org\/node\/3626046\/edit","status":"1","promote":"0","sticky":"0","created":"1791390977","changed":"1791390977","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16785864","id":16785864,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16785865","id":16785865,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16785866","id":16785866,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16794589","id":16794589,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16794590","id":16794590,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1791390977","sa_risk":[10,"Moderately critical"],"sa_id":"SA-CONTRIB-2026-211"}