Remote

Drupal Security Team

@drupalsecurity@drupal.community

mastodon 4.5.10

Republish Drupal Security Advisories & related news. Follow Drupal Security Team. Contact @greggles@drupal.community to get RT. DM & mentions not actively monitored. https://drupal.org/node/101494

551 Followers

5 Following

25 Posts

Joined December 16, 2022

Source of Advisories:

https://www.drupal.org/security/

Posts

Drupal Security Team @drupalsecurity@drupal.community · Jul 15, 2026

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011 https://www.drupal.org/sa-core-2026-011

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jul 01, 2026

Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066 https://www.drupal.org/sa-contrib-2026-066

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 10, 2026

Brute force attack protection - Critical - Unsupported - SA-CONTRIB-2026-047

https://www.drupal.org/sa-contrib-2026-047

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 10, 2026

Mother May I - Critical - Unsupported - SA-CONTRIB-2026-045

https://www.drupal.org/sa-contrib-2026-045

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 10, 2026

Examples for Developers - Moderately critical - Access bypass - SA-CONTRIB-2026-044

https://www.drupal.org/sa-contrib-2026-044

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 10, 2026

Composer - Critical - Unsupported - SA-CONTRIB-2026-046

https://www.drupal.org/sa-contrib-2026-046

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 10, 2026

Tagify - Moderately critical - Cross-site scripting (XSS) - SA-CONTRIB-2026-043

https://www.drupal.org/sa-contrib-2026-043

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 03, 2026

Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041

https://www.drupal.org/sa-contrib-2026-041

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 03, 2026

Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONTRIB-2026-042

https://www.drupal.org/sa-contrib-2026-042

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 03, 2026

TacJS - Moderately critical - Improper Access Control - SA-CONTRIB-2026-040

https://www.drupal.org/sa-contrib-2026-040

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Jun 03, 2026

LocalGov Workflows - Moderately critical - Information disclosure - SA-CONTRIB-2026-039

https://www.drupal.org/sa-contrib-2026-039

1

0

1

0

Drupal Security Team @drupalsecurity@drupal.community · May 27, 2026

Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038

https://www.drupal.org/sa-contrib-2026-038

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · May 20, 2026

Replying to @drupalsecurity@drupal.community

The Drupal Security Team estimates that up to 5% of Drupal sites may be vulnerable to this highly critical issue. Furthermore, a majority of Drupal sites may also be affected by the Symfony and Twig security advisories published today, so all sites should update soon. Details in the advisory above.

5

0

4

0

Drupal Security Team @drupalsecurity@drupal.community · May 20, 2026

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

https://www.drupal.org/sa-core-2026-004

4

2

14

0

Drupal Security Team @drupalsecurity@drupal.community · May 20, 2026

Drupal-related security releases today include those referenced below. You can start updating dependencies from Symfony and doing testing steps now.

5

1

5

1

Drupal Security Team @drupalsecurity@drupal.community · May 18, 2026

Replying to @drupalsecurity@drupal.community

Site owners are encouraged to get their sites ready for a release of Drupal core that may affect them. Site owners should make upgrades easier (e.g. update to the most recent release available, improve deployment automation, improve automated testing) given the current security climate.

3

1

7

0

Drupal Security Team @drupalsecurity@drupal.community · May 18, 2026

Upcoming highly critical release on May 20, 2026 - PSA-2026-05-18

https://www.drupal.org/psa-2026-05-18

5

2

22

0

Drupal Security Team @drupalsecurity@drupal.community · May 13, 2026

Date iCal - Critical - Information disclosure - SA-CONTRIB-2026-037

https://www.drupal.org/sa-contrib-2026-037

0

0

1

0

Drupal Security Team @drupalsecurity@drupal.community · May 13, 2026

Node View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-034

https://www.drupal.org/sa-contrib-2026-034

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · May 13, 2026

Colorbox Inline - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-036

https://www.drupal.org/sa-contrib-2026-036

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · May 13, 2026

Translate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-035

https://www.drupal.org/sa-contrib-2026-035

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Apr 22, 2026

Obfuscate - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-033

https://www.drupal.org/sa-contrib-2026-033

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Aug 27, 2025

Facets - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-100

https://www.drupal.org/sa-contrib-2025-100

0

0

1

0

Drupal Security Team @drupalsecurity@drupal.community · Mar 24, 2025

Replying to @drupalsecurity@drupal.community

Responses are welcome to the survey for the next few days, but any responses delivered today will be included in the Drupalcon Presentation tomorrow!

0

0

0

0

Drupal Security Team @drupalsecurity@drupal.community · Mar 19, 2025

We'd like to know what you think. Share your thoughts in our community survey for 2025 https://forms.gle/TFuZBBHsL8YVDARq6

2

2

8

0