{"action":"Upgrade drupal/core to 7.96 or later.","affected":[{"fixed":"10.0.8","introduced":"10.0.0"},{"fixed":"9.5.8","introduced":"9.5.0"},{"fixed":"9.4.14","introduced":"9.0.0"},{"fixed":"7.96","introduced":"7.0.0"}],"component":"drupal/core","cve_ids":["CVE-2023-31250"],"ecosystem":"Packagist","epss":0.0054,"exploited":false,"fixed_versions":["10.0.8","9.5.8","9.4.14","7.96"],"ghsa_id":"GHSA-8849-cv9f-vccm","id":"tcs_01M5KEYSX01QYHSV1W9CDR9G22","modified_at":"2025-12-10T23:41:04.918953Z","published_at":"2023-04-26T21:30:37Z","references":["https://osv.dev/vulnerability/GHSA-8849-cv9f-vccm","https://nvd.nist.gov/vuln/detail/CVE-2023-31250","https://github.com/drupal/core","https://www.drupal.org/sa-core-2023-005"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-8849-cv9f-vccm","url":"https://osv.dev/vulnerability/GHSA-8849-cv9f-vccm"}],"summary":"Access bypass in Drupal core"}