Drupal

Drupal's critical Field UI flaw makes the whole site configuration matter

Contributed modules and custom code can expose vulnerable core functionality. The advisory identifies fixed branches and a specific temporary mitigation.