Security

Security

Security

Moderately Critical Tagify Security Update

Share

× SHARE

The Tagify module security update helps deal access bypass as an attacker with the permission "access content" can view and reference unpublished terms. ...more

Read Full Content
Security

Moderately Critical Drupal Core Multiple Vulnerabilities Update

Share

× SHARE

The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of the primary domain. To correct this install the recent version of Drupal 9. ...more

Read Full Content
Security

Critical Drupal Core Arbitrary PHP Code Execution Security Update

Share

× SHARE

The recent security release included a critical Arbitrary PHP code execution update. ...more

Read Full Content
Security

Moderately Critical Drupal Core Access Bypass Update

Share

× SHARE

Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. In order to solve that install the latest Drupal 9 versions. ...more

Read Full Content
Security

Moderately Critical Core Security Update for Information Disclosure

Share

× SHARE

Recent Drupal core security update for information disclosure was released this week. To solve this issue you need to use the updated version of Drupal 7, 8 and 9. ...more

Read Full Content
Security

Moderately critical Security Update - Multiple: Remote Code Execution, Information disclosure

Share

× SHARE

This security advisory corresponds to a 3rd party vulnerability. The solution is to install the latest version (8.x-2.6) of this module and update dompdf/dompdf at the same time. ...more

Read Full Content
Security

Moderately Critical Lottiefiles Field Security Update

Share

× SHARE

The module does not sufficiently filter user-provided text on output, resulting in a Cross-Site Scripting (XSS) vulnerability. The solution is to use the latest updated version. ...more

Read Full Content
Security

Crtical Config Terms Security Update

Share

× SHARE

The module doesn't sufficiently check access for the edit and delete operations. Users with "access content" permission can edit or delete any term. To solve this issue use the latest version. ...more

Read Full Content
Security

Drupal 9.3.17 Update

Share

× SHARE

This is a patch (bugfix) release of Drupal 9 due to the two security advisories released by Guzzle. ...more

Read Full Content
Security

Drupal 9.4.1 Released

Share

× SHARE

This is a patch (bugfix) release of Drupal 9 due to the third-party Guzzle security advisories. ...more

Read Full Content
Security

Drupal Core Composer Dependencies Security Policy Updated

Share

× SHARE

Here are the security policy updates for Drupal Core Composer Dependencies PSA-2022-06-20. ...more

Read Full Content
Security

Moderately Critical Drupal Core Security Update

Share

× SHARE

On Friday, Drupal Security Team released Moderately Critical Drupal Core Security Update for Third-party Integration Guzzle library. ...more

Read Full Content

Latest

Is There a Future for Drupal in the AI World?

14 September 2026
Chrome 153 Starts Two-Week Release Cycle with 230 Security Fixes and an Exploited V8 Flaw

14 September 2026
EU Cyber Resilience Act Reporting Rules Take Effect for Manufacturers

14 September 2026

Follow @thedroptimes