{"action":"Upgrade drupal/sector to 10.3.3 or later.","affected":[{"fixed":"10.3.3","introduced":"0"},{"fixed":"10.4.2","introduced":"10.4.0"}],"component":"drupal/sector","cve_ids":["CVE-2026-107260"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["10.3.3","10.4.2"],"id":"tcs_01M5JKTAPM2GFPVT9XWGVVAPN0","modified_at":"2026-10-21T18:15:02.577863642Z","published_at":"2026-10-21T17:43:58Z","references":["https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-229","https://www.drupal.org/sa-contrib-2026-229"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DRUPAL-CONTRIB-2026-229","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2026-229"}],"summary":"Sector is a distribution targeted towards Drupal site builders and site owners who are looking for a fully configured Drupal project out of the box."}