CVE-2026-114546

The Media Alias Display module for Drupal is vulnerable to information disclosure (CWE-525) in versions 0.0.0 to 2.1.2 and 3.0.0 to 3.0.2 . The root cause is that certain files may be served with a Cache-Control: public HTTP header when they should be uncacheable. This allows unauthorized users t...

EUVD-2026-113527

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.2, from 3.0.0 to 3.0.2...

CVE-2026-118571

The Media Alias Display module for Drupal is vulnerable to information disclosure (CWE-525) in versions 0.0.0 to 2.1.3 and 3.0.0 to 3.0.3 . The root cause is that certain files may be served with a Cache-Control: public HTTP header even when they should be uncacheable. This allows unauthorized us...

EUVD-2026-113682

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3...