CVE-2026-96384

The Drupal Mermaid Diagram Field module (versions 1.0.4 to 1.0.9 ) contains an Incorrect Authorization vulnerability (CWE-863) that enables Forceful Browsing . The root cause is that the module fails to properly respect default revision behavior and does not adequately limit access to content dis...

EUVD-2026-107821

Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9...

Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180

This module enables you to add mermaid diagram that displays either inline on an entity or optionally in a modal. The module doesn't sufficiently respect default revision behavior and does not properly limit access to the modal content. This vulnerability is mitigated by the fact that an attacker...