CVE-2016-20001: Rest/json Project Rest/json

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.

Affected products

• Rest/json Project Rest/json: up to and including 7.x-1.5

Published 2021-01-01. Last modified 2026-06-17.