Junglewise Threat Intelligence

DRUPAL-CONTRIB-2020-010 - This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. The sec

Severity: info · Published 2020-04-15

Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Jsonapi. Vendors: Packagist:Https://Packages.Drupal.Org/8.

Executive brief

This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities.

The security team and module maintainers are marking this project unsupported. Both the `8.x-1.x` and `8.x-2.x` versions are unsupported, and users of either version are strongly encouraged to upgrade to a supported version of Drupal core, which includes a supported version of JSON:API.

The eventual removal of security coverage for the JSON:API contributed module was [announced with the release of JSON:API 8.x-1.22](https://www.drupal.org/project/jsonapi/releases/8.x-1.22) on 28 June 2018.

Additionally, there is a known security issue with the 8.x-1.x branch of the project that will not be fixed by the maintainers. That issue is not present in the 8.x-2.x branch of the project, nor is it present in Drupal core.

Affected products

  • packagist:https://packages.drupal.org/8 drupal/jsonapi

Related threats