Packagist/drupal/core: unknown

The Media Library module does not properly check entity access in some circumstances. This may result in users with access to edit content seeing metadata about media items they are not authorized to

Action: Upgrade drupal/core to 9.4.10 or later.

composer require drupal/core:9.4.10

composer require drupal/core:9.5.2

composer require drupal/core:10.0.2

Affected

introduced	fixed	last affected
8.0.0	9.4.10	-
9.5.0	9.5.2	-
10.0.0	10.0.2	-

Fixed versions

9.4.10

9.5.2

10.0.2

Sources

osv: DRUPAL-CORE-2023-001
https://www.drupal.org/sa-core-2023-001

published 2023-01-18T17:40:39Z · modified 2026-09-19T18:19:34Z · JSON