Drupal’s automation tools solve different problems. The harder question is how they can exchange work without weakening their execution models, permissions, or auditability.
Reusable Drupal components become awkward when each placement needs a different presentation. ERFO adds controlled variation without duplicating or altering the referenced content.
The Tagify module security update helps deal access bypass as an attacker with the permission "access content" can view and reference unpublished terms.
...more
The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. To correct this install the recent version of Drupal 9.
...more
Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. In order to solve that install the latest Drupal 9 versions.
...more
Recent Drupal core security update for information disclosure was released this week. To solve this issue you need to use the updated version of Drupal 7, 8 and 9.
...more