CVE-2026-55809

A vulnerability in the Flag attendance field of Drupal allows for improper modification of dynamically-determined object attributes, leading to potential object injection attacks. This issue affects all versions from 0.0.0 to 1.2, posing a high risk to applications utilizing this module. Organizations using affected versions should prioritize immediate patching to mitigate the risk of exploitation.