Nixpkgs security tracker

Dismissed

(no matching packages found)

Permalink CVE-2026-12535

created 2 weeks, 2 days ago Activity log

Created & dismissed (no matching packages found) suggestion 2 weeks, 2 days ago

Formatter Field - Critical - PHP object injection - SA-CONTRIB-2026-048

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Formatter Field allows Object Injection. This issue affects Formatter Field versions: from 0.0.0 to 2.0.0.

References

https://www.drupal.org/sa-contrib-2026-048

Affected products

Formatter Field

<2.0.0

Suggestion detail

References

Affected products