{"action":"Upgrade drupal/core to 10.6.19 or later.","affected":[{"fixed":"10.6.19","introduced":"8.9.0"},{"fixed":"11.3.19","introduced":"11.0.0"},{"fixed":"11.4.10","introduced":"11.4.0"},{"fixed":"12.0.0-beta2","introduced":"12.0.0-alpha1"}],"component":"drupal/core","cve_ids":["CVE-2026-108097"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["10.6.19","11.3.19","11.4.10","12.0.0-beta2"],"id":"tcs_01M5KERDAHG7WENSBWMREHJ0M1","modified_at":"2026-10-14T19:09:54Z","published_at":"2026-10-14T16:10:00Z","references":["https://osv.dev/vulnerability/DRUPAL-CORE-2026-014","https://www.drupal.org/sa-core-2026-014"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DRUPAL-CORE-2026-014","url":"https://osv.dev/vulnerability/DRUPAL-CORE-2026-014"}],"summary":"A remote code execution vulnerability exists within the Field UI module in Drupal core."}