Entity Browser - Moderately critical - Cross site scripting - SA-CONTRIB-2026-094 Read post
Drupal Security Team
@drupalsecurity.bsky.social
Automatically post Drupal Security Advisories & related news. Follow Drupal Security Team. @gknaddison.bsky.social to get RT. DM & mentions not monitored. https://drupal.org/node/101494
Edit in-place field - Moderately critical - Access bypass - SA-CONTRIB-2026-093 Read post
Powerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092 Read post
Disable Login Page - Critical - Unsupported - SA-CONTRIB-2026-091 Read post
Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090 Read post
How does the Drupal project protect millions of websites? Read @farriss.bsky.social blog post about the practices of the Drupal Security Team to learn the context of how Drupal is adapting to the new dynamics introduced by LLMs. www.drupal.org/association/...
Client Challenge
drupal.org
Security advisory coverage removed - PSA-2026-07-22 Read post
Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089 Read post
PhotoSwipe - Responsive JavaScript Modal Image Gallery - Moderately critical - Access bypass - SA-CONTRIB-2026-088 Read post
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087 Read post
Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086 Read post
Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085 Read post
Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084 Read post
PanKM - Critical - Unsupported - SA-CONTRIB-2026-083 Read post
Search API Autocomplete - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-082 Read post
Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081 Read post
Media Folders - Moderately critical - Cross site scripting - SA-CONTRIB-2026-080 Read post
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012 Read post
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011 Read post
Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010 Read post
Commerce guest registration - Critical - Unsupported - SA-CONTRIB-2026-079 Read post
Clean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078 Read post
Raw Formatter [Meta Tag Formatter] - Critical - Unsupported - SA-CONTRIB-2026-077 Read post
AI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-076 Read post
UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075 Read post
ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074 Read post
Siteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-073 Read post
Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072 Read post
Ray Enterprise Translation - Moderately critical - Cross site request forgery - SA-CONTRIB-2026-071 Read post
Login Disable - Moderately critical - Access bypass - SA-CONTRIB-2026-070 Read post