{"action":"Upgrade drupal/core to 11.3.0 or later.","affected":[{"fixed":"11.3.14","introduced":"11.3.0"},{"fixed":"11.4.4","introduced":"11.4.0"},{"fixed":"11.3.0","introduced":"11.2.0"}],"component":"drupal/core","cve_ids":["CVE-2026-15917"],"ecosystem":"Packagist","epss":0.00206,"exploited":false,"fixed_versions":["11.3.14","11.4.4","11.3.0"],"id":"tcs_01M5KERD4T891BXCPB9B90NQAR","modified_at":"2026-07-15T20:56:45.436756Z","published_at":"2026-07-15T19:51:57Z","references":["https://osv.dev/vulnerability/DRUPAL-CORE-2026-011","https://www.drupal.org/sa-core-2026-011"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"DRUPAL-CORE-2026-011","url":"https://osv.dev/vulnerability/DRUPAL-CORE-2026-011"},{"source":"nvd","source_id":"CVE-2026-15917","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15917"}],"summary":"Drupal core 11.2 and above integrate the HTMX JavaScript library."}