View online: https://www.drupal.org/sa-contrib-2026-233 Project: Swiper formatter [1] Project machine name: swiper_formatter Date: 2026-October-21 Security risk: *Moderately critical* 13 ∕ 25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:All [2] Vulnerability: Information disclosure Affected versions: <2.1.2 || >=3.0.0 <3.1.0 CVE IDs: CVE-2026-114535 Description: Swiper is mobile first, layout and gestures wise, it provides great amount of options for designing your own widget and related events. This module provides a route for displaying published content entities in a dialog. The route does not sufficiently verify the current user's access to the specific entity. This vulnerability is mitigated by the fact that only rendered output is returned, and field-level access controls are still enforced. Solution: Install the latest version: * If you use the Swiper formatter module 3.x, upgrade to Swiper formatter 3.1.0 [3] * If you use the Swiper formatter module 2.x, upgrade to Swiper formatter 2.1.2 [4] Reported By: * Ryan Solomon (phizes) [5] * Julian Pustkuchen (anybody) [6] * Joshua Sedler (grevil) [7] Fixed By: * Drupal Lady (bbu23) [8] * Joshua Sedler (grevil) [9] Coordinated By: * Swan Kalata (akalata) [10] of the Drupal Security Team * Greg Knaddison (greggles) [11] of the Drupal Security Team * Juraj Nemec (poker10) [12] of the Drupal Security Team ------------------------------------------------------------------------------ Contribution record [13] [1] https://www.drupal.org/project/swiper_formatter [2] https://www.drupal.org/drupal-security-team/security-risk-levels-defined [3] https://www.drupal.org/project/swiper_formatter/releases/3.1.0 [4] https://www.drupal.org/project/swiper_formatter/releases/2.1.2 [5] https://www.drupal.org/u/phizes [6] https://www.drupal.org/u/anybody [7] https://www.drupal.org/u/grevil [8] https://www.drupal.org/u/bbu23 [9] https://www.drupal.org/u/grevil [10] https://www.drupal.org/u/akalata [11] https://www.drupal.org/u/greggles [12] https://www.drupal.org/u/poker10 [13] https://new.drupal.org/contribution-record?source_link=https%3A//www.drupal....