{"action":"Upgrade drupal/entity_embed to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"drupal/entity_embed","cve_ids":["CVE-2020-13673"],"ecosystem":"Packagist","ecosystem_qualifier":"Packagist:https://packages.drupal.org/8","epss":0.00259,"exploited":false,"fixed_versions":["1.2.0"],"id":"tcs_01M5MF6R5W8GEDK3W0AA1HC2PD","modified_at":"2026-09-10T03:45:38.995017645Z","published_at":"2021-09-15T15:28:04Z","references":["https://osv.dev/vulnerability/DRUPAL-CONTRIB-2021-028","https://www.drupal.org/sa-contrib-2021-028"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DRUPAL-CONTRIB-2021-028","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2021-028"}],"summary":"This advisory addresses a similar issue to [Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-006](https://www.drupal.org/sa-core-2021-006)."}