Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Diba carousel slider - Moderately critical - Cross Site Scripting (XSS) - SA-CONTRIB-2026-191 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Smart Content - Moderately critical - Access bypass - SA-CONTRIB-2026-190 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026CSS Usage Analyzer - Moderately critical - Improper access control - SA-CONTRIB-2026-189 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Combined image style - Moderately critical - Improper access control - SA-CONTRIB-2026-188 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform REST - Less critical - Access bypass - SA-CONTRIB-2026-186 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Editoria11y Accessibility Checker - Moderately critical - Access bypass - SA-CONTRIB-2026-185 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Tawk.to - Live chat application - Critical - Cross Site Request Forgery - SA-CONTRIB-2026-184 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026CookieCuttr - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-181 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Mermaid Diagram Field - Moderately critical - Access bypass - SA-CONTRIB-2026-180 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Commerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Project Browser - Critical - Cross-site request forgery - SA-CONTRIB-2026-178 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Cloud - Critical - Remote code execution - SA-CONTRIB-2026-177 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Cloud - Critical - Remote code execution - SA-CONTRIB-2026-176 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-174 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Less critical - Access bypass - SA-CONTRIB-2026-173 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-172 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Less critical - Denial of service - SA-CONTRIB-2026-170 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-169 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-168 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-166 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Less critical - Access bypass - SA-CONTRIB-2026-165 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Access bypass, Server-side request forgery - SA-CONTRIB-2026-164 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-163 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-162 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-161 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-160 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-159 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-158 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-155 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 23/09/2026Webform - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-154 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 21/09/2026Upcoming critical contributed project security release on September 23, 2026 - PSA-2026-09-21 Read post 042
Drupal Security Team @drupalsecurity.bsky.social · 16/09/2026Drupal core - Moderately critical - Third-party libraries - SA-CORE-2026-013 Read post 021
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026Ultimate Table Field - Critical - Access bypass - SA-CONTRIB-2026-153 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026Taxonomy Term Glossary - Critical - Access bypass - SA-CONTRIB-2026-152 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Moderately critical - Insufficient replay protection - SA-CONTRIB-2026-150 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-147 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-146 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Moderately critical - Authentication bypass - SA-CONTRIB-2026-145 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Critical - Open redirect - SA-CONTRIB-2026-143 Read post 000
Drupal Security Team @drupalsecurity.bsky.social · 09/09/2026SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142 Read post 000