field_collection_for_drupal_7 vulnerabilities

CVEs whose affected-version data names the field_collection_for_drupal_7 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-77152Medium· 5.3

6d ago

Field Collection for Drupal 7 access bypass via missing parent entity access check

Improper Authorization vulnerability in Drupal Field Collection for Drupal 7 allows a user with the "edit field collections" permission to bypass access control on the parent (host) entity. The access check for field collection items (f…

▾ SunlitDrupal · Field Collection for Drupal 7EPSS 0.23%via CVEORG