title: Form API ignores access restrictions on submit buttons link: https://www.drupal.org/SA-CORE-2016-001 cve: CVE-2016-3165 branches: 8.0.x: time: 2016-02-15 18:57:00 versions: ['>=8.0','<8.0.4'] reference: composer://drupal/core
info at phpclasses dot org