{
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c4.4.0"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/linkit"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c4.4.0"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/user/998680"
      ],
      "name": "Patrick Fey"
    }
  ],
  "details": "Linkit provides an easy interface for internal and external linking with WYSIWYG editors by using an autocomplete field.\n\nIt does not sufficiently sanitize user input.\n\nThis vulnerability is mitigated by the fact that an attacker must have a role with the permission to create or edit an entity bundle.",
  "id": "DRUPAL-CONTRIB-2021-042",
  "modified": "2023-08-11T16:56:26.000Z",
  "published": "2021-09-29T14:38:35.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2021-042"
    }
  ],
  "schema_version": "1.7.0"
}