View online: https://www.drupal.org/sa-contrib-2026-108 Project: Data field [1] Date: 2026-August-26 Security risk: *Moderately critical* 13 ∕ 25 AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:All [2] Vulnerability: Information disclosure Affected versions: <2.0.13 CVE IDs: CVE-2026-81269 Description: This module enables you to store structured data in configurable fields and expose Data Field values through JSON endpoints. The module doesn't sufficiently check access when returning Data Field values through its JSON endpoint. This may allow anonymous users to access field values belonging to entities they cannot otherwise view, including unpublished content. Solution: Install the latest version: * If you use the Data Field module, upgrade to Data Field 2.0.13 [3] Reported By: * Marcus Johansson (marcus_johansson) [4] * Drew Webber (mcdruid) [5] of the Drupal Security Team * Steven Jones (steven jones) [6] Fixed By: * Joseph Olstad (joseph.olstad) [7] * NGUYEN Bao (lazzyvn) [8] * Marcus Johansson (marcus_johansson) [9] * Steven Jones (steven jones) [10] Coordinated By: * Swan Kalata (akalata) [11] of the Drupal Security Team * David Stoline (dstol) [12] * Greg Knaddison (greggles) [13] of the Drupal Security Team * Drew Webber (mcdruid) [14] of the Drupal Security Team * Juraj Nemec (poker10) [15] of the Drupal Security Team * Jess (xjm) [16] of the Drupal Security Team ------------------------------------------------------------------------------ Contribution record [17] [1] https://www.drupal.org/project/datafield [2] https://www.drupal.org/security-team/risk-levels [3] https://www.drupal.org/project/datafield/releases/2.0.13 [4] https://www.drupal.org/u/marcus_johansson [5] https://www.drupal.org/u/mcdruid [6] https://www.drupal.org/u/steven-jones [7] https://www.drupal.org/u/josepholstad [8] https://www.drupal.org/u/lazzyvn [9] https://www.drupal.org/u/marcus_johansson [10] https://www.drupal.org/u/steven-jones [11] https://www.drupal.org/u/akalata [12] https://www.drupal.org/u/dstol [13] https://www.drupal.org/u/greggles [14] https://www.drupal.org/u/mcdruid [15] https://www.drupal.org/u/poker10 [16] https://www.drupal.org/u/xjm [17] https://new.drupal.org/contribution-record?source_link=https%3A//www.drupal....