{"action":"Upgrade drupal/rapidoc_elements_field_formatter to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"drupal/rapidoc_elements_field_formatter","cve_ids":["CVE-2025-31696"],"ecosystem":"Packagist","epss":0.00257,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-86h4-w859-3hhv","id":"tcs_01M5KEYQCBDZX2K34RJVT684C5","modified_at":"2025-12-10T23:41:13.745891Z","published_at":"2025-04-01T00:30:35Z","references":["https://osv.dev/vulnerability/GHSA-86h4-w859-3hhv","https://nvd.nist.gov/vuln/detail/CVE-2025-31696","https://git.drupalcode.org/project/rapidoc_elements_field_formatter","https://www.drupal.org/sa-contrib-2025-025"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-86h4-w859-3hhv","url":"https://osv.dev/vulnerability/GHSA-86h4-w859-3hhv"}],"summary":"Drupal RapiDoc OAS Field Formatter Cross-Site Scripting (XSS) vulnerability"}