Security Update

Security

Moderately Critical Lottiefiles Field Security Update

Share

× SHARE

The module does not sufficiently filter user-provided text on output, resulting in a Cross-Site Scripting (XSS) vulnerability. The solution is to use the latest updated version. ...more

Read Full Content
Security

Crtical Config Terms Security Update

Share

× SHARE

The module doesn't sufficiently check access for the edit and delete operations. Users with "access content" permission can edit or delete any term. To solve this issue use the latest version. ...more

Read Full Content
Security

Drupal 9.3.17 Update

Share

× SHARE

This is a patch (bugfix) release of Drupal 9 due to the two security advisories released by Guzzle. ...more

Read Full Content
Security

Drupal 9.4.1 Released

Share

× SHARE

This is a patch (bugfix) release of Drupal 9 due to the third-party Guzzle security advisories. ...more

Read Full Content
Security

Moderately Critical Drupal Core Security Update

Share

× SHARE

On Friday, Drupal Security Team released Moderately Critical Drupal Core Security Update for Third-party Integration Guzzle library. ...more

Read Full Content
Security

Drupal 9.3.15 Released

Share

× SHARE

Drupal 9.3.15 is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. ...more

Read Full Content
Blog

Drupal 9.2.18 Released

Share

× SHARE

Drupal core's form API had a vulnerability where certain contributed or custom modules' forms may have been vulnerable to improper input validation. ...more

Read Full Content
Blog

Drupal 9.3.12 Released

Share

× SHARE

According to the latest security update, those that using Drupal 9.3 need to update to Drupal 9.3.12. ...more

Read Full Content
Security

Moderately Critical Information Disclosure Vulnerability in Drupal Core

Share

× SHARE

The Drupal security team announced on February 16th, 2022, the moderately critical information disclosure vulnerability in Drupal Core, SA-CORE-2022-004. ...more

Read Full Content
Security

Moderately Critical Improper Input Validation in Drupal Core

Share

× SHARE

Drupal security team announced on February 16th, 2022, the moderately critical improper input validation vulnerability in Drupal Core, SA-CORE-2022-003. ...more

Read Full Content
Security

Less Critical XSS Vulnerability in Custom Breadcrumbs Module

Share

× SHARE

Drupal Security Team announced a Cross-Site Scripting (XSS) vulnerability SA-CONTRIB-2022-024 that has low criticality index in the Custom Breadcrumbs Module on February 9th, 2022. ...more

Read Full Content
Security

Moderately Critical Access Bypass Vulnerability in Fancy File Delete Module

Share

× SHARE

Drupal Security team announces a moderately critical access bypass vulnerability SA-CONTRIB-2022-023 in the Fancy File Delete Module on February 9th 2022. ...more

Read Full Content

Latest

Drupal AI 1.5.0 Moves Five Submodules Into Standalone Projects

16 October 2026
Drupal 12 Release Team Plans to Bundle Disruptive Code Changes Ahead of RC1

16 October 2026
PNW Drupal Summit Speakers Take on Live Chat, Accessibility and HTMX

16 October 2026

Follow @thedroptimes