CVE-2026-13241

The Drupal Paragraphs module (versions 0.0.0 to 1.21.0 ) is vulnerable to a Missing Authorization issue in its optional Paragraphs Library module. The root cause is that the module fails to sufficiently restrict access to direct child paragraphs of library items through API endpoints , which allo...

CVE-2026-13240

The Drupal Paragraphs module (versions 0.0.0 through 1.21.0) contains a missing authorization vulnerability in the optional Paragraphs Library module . The root cause is that the module fails to sufficiently restrict access to unpublished library items when they are displayed in lists. This allow...