{"id":"DRUPAL-CONTRIB-2020-010","aliases":[],"status":"published","description":"This module provides a JSON API standards-compliant API for accessing and  \nmanipulating Drupal content and configuration entities.\n\nThe security team and module maintainers are marking this project unsupported. Both the `8.x-1.x` and `8.x-2.x` versions are unsupported, and users of either version are strongly encouraged to upgrade to a supported version of Drupal core, which includes a supported version of JSON:API.\n\nThe eventual removal of security coverage for the JSON:API contributed module was [announced with the release of JSON:API 8.x-1.22](https://www.drupal.org/project/jsonapi/releases/8.x-1.22) on 28 June 2018.\n\nAdditionally, there is a known security issue with the 8.x-1.x branch of the project that will not be fixed by the maintainers. That issue is not present in the 8.x-2.x branch of the project, nor is it present in Drupal core.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2020-04-15T15:45:46Z","modified":"2026-09-10T03:45:59Z","affected":[{"source":"osv","ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/jsonapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]}],"references":[{"url":"https://www.drupal.org/sa-contrib-2020-010","tags":["web"]}],"sources":{"osv":[{"id":"DRUPAL-CONTRIB-2020-010","description":"This module provides a JSON API standards-compliant API for accessing and  \nmanipulating Drupal content and configuration entities.\n\nThe security team and module maintainers are marking this project unsupported. Both the `8.x-1.x` and `8.x-2.x` versions are unsupported, and users of either version are strongly encouraged to upgrade to a supported version of Drupal core, which includes a supported version of JSON:API.\n\nThe eventual removal of security coverage for the JSON:API contributed module was [announced with the release of JSON:API 8.x-1.22](https://www.drupal.org/project/jsonapi/releases/8.x-1.22) on 28 June 2018.\n\nAdditionally, there is a known security issue with the 8.x-1.x branch of the project that will not be fixed by the maintainers. That issue is not present in the 8.x-2.x branch of the project, nor is it present in Drupal core.","status":"published","published":"2020-04-15T15:45:46Z","modified":"2026-09-10T03:45:59.709972162Z","updated_at":"2026-11-02T15:46:13.584509Z"}]}}