{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3011781","id":"3011781","resource":"node","machine_name":"block_ajax"},"field_sa_advisory_id":"192","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/akalata\u0022 rel=\u0022nofollow\u0022\u003ESwan Kalata (akalata)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/mcdruid\u0022 rel=\u0022nofollow\u0022\u003EDrew Webber (mcdruid)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Basic\/A:None\/CI:All\/II:All\/E:Theoretical\/TD:All","field_sa_description":{"value":"\u003Cp\u003EThe Block AJAX module enables you to load blocks asynchronously via Ajax.\u003C\/p\u003E\n\u003Cp\u003EThe module doesn\u0027t sufficiently validate user-supplied data which is used to construct a block. In the worst case scenario, this can lead to PHP Object Injection and Remote Code Execution.\u003C\/p\u003E\n\u003Cp\u003EThe vulnerability is mitigated by the fact that it only affects sites that have Layout Builder enabled (or another block plugin that handles the data this module passes to it in a potentially unsafe way).\u003C\/p\u003E\n\u003Cp\u003EPlease see the release notes for details of potentially breaking changes.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/anybody\u0022 rel=\u0022nofollow\u0022\u003EJulian Pustkuchen (anybody)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/grevil\u0022 rel=\u0022nofollow\u0022\u003EJoshua Sedler (grevil)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/mcdruid\u0022 rel=\u0022nofollow\u0022\u003EDrew Webber (mcdruid)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the \u0022block_ajax\u0022 module, upgrade to \u003Ca href=\u0022\/project\/block_ajax\/releases\/3.0.2\u0022 rel=\u0022nofollow\u0022\u003Eblock_ajax 3.0.2\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"PHP object injection","field_issue_last_status_change":"1791404897","field_sa_cve":["CVE-2026-107249"],"field_is_psa":"0","field_affected_versions":"\u003C3.0.2","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3629118","id":"3629118","resource":"node"}],"nid":"3629038","vid":"14515156","is_new":false,"type":"sa","title":"Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-192","edit_url":"https:\/\/www.drupal.org\/node\/3629038\/edit","status":"1","promote":"0","sticky":"0","created":"1791389691","changed":"1791404897","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16799886","id":16799886,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16799887","id":16799887,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16799910","id":16799910,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16800012","id":16800012,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1791389691","sa_risk":[20,"Highly critical"],"sa_id":"SA-CONTRIB-2026-192"}