DRUPAL-CONTRIB-2026-250

Data Field allows you to create custom fields with multiple values under the default table form. The fileuri formatter does not properly escape filenames when rendering links to uploaded files. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to...

Data field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250

Data Field allows you to create custom fields with multiple values under the default table form. The fileuri formatter does not properly escape filenames when rendering links to uploaded files. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to...

CVE-2024-32966

Static Web Server SWS is a tiny and fast production-ready web server suitable to serve static web files or assets. In affected versions if directory listings are enabled for a directory that an untrusted user has upload privileges for, a malicious file name like .txt will allow JavaScript code...