Security

Security

Security

Actively Exploited MLflow Flaw Can Expose Cloud Credentials

Share

× SHARE

AI services operating beside a Drupal site can create their own attack surface, even when Drupal itself is fully updated. ...more

Read Full Content
Security

Joomla Fixes Ten Security Flaws as Umbraco Patches High-Severity CMS Issue

Share

× SHARE

Unsupported CMS branches can turn a security patch into a major-version project. The 18 August releases show how support status changes the remediation burden across mixed CMS estates. ...more

Read Full Content
Security

WordPress 7.0.4 Fixes Authenticated Remote Code Execution Through File Uploads

Share

× SHARE

File-upload permissions become more consequential when a CMS hands untrusted content to external media processors. ...more

Read Full Content
Security

Drupal Security Team Marks 16 Contributed Projects Unsupported in Ten Weeks

Share

× SHARE

The latest three projects have limited reported use, but the pattern extends beyond their reach. For affected site teams, the recurring security response is to uninstall the project rather than install an update. ...more

Read Full Content
Security

WordPress 7.0.3 Fixes 12 Security Issues, Including High-Severity Login XSS

Share

× SHARE

The 8.9 login-screen flaw is remotely reachable without an authenticated account, yet its path to code execution still depends on social engineering and active victim interaction. ...more

Read Full Content
Security

Unit 42 Says AI System Found 14,090 Open-Source Vulnerabilities

Share

× SHARE

The striking number is only part of the result. NOVA also reports thousands of access-control, injection, path-traversal, and dependency-related findings that conventional crash-focused automation is less suited to uncover. ...more

Read Full Content
Security

Five Drupal Advisories Span Access Bypass and SSRF Risks

Share

× SHARE

Five Moderately Critical labels do not describe one kind of failure. Earlier Drupal disclosures show where payment, identity, and outbound-request risks recur, and where the similarities stop at the advisory classification. ...more

Read Full Content
Security

UI Patterns XSS Fix Changes How Component Markup Is Handled

Share

× SHARE

A July security update fixed insufficient sanitisation of markup passed to UI Patterns components. Follow-up work moved escaping closer to render time, while UI Patterns 2.0.19 is now the current stable release. ...more

Read Full Content
Security

Security Updates Fix Entity Browser XSS and Edit in-place field Access Bypass

Share

× SHARE

The same severity label does not mean the same exposure. Site maintainers need to distinguish administrator-dependent XSS from a permission-based field-editing bypass when assessing the two updates. ...more

Read Full Content
Security

Drupal Security Advisories Require One Update and Two Uninstalls

Share

× SHARE

Matching scores can conceal the operational difference between a routine update and a dependency that must be removed. ...more

Read Full Content
Security

Drupal Association Reports First Six Weeks of AI Security Initiative

Share

× SHARE

Faster vulnerability discovery exposes a slower constraint: the human review needed to turn reports into secure releases. ...more

Read Full Content
Security

Drupal.org Completes Security Issue Migration to GitLab

Share

× SHARE

Automated testing now covers confidential merge requests for contributed-project security fixes, where testing was previously unavailable. ...more

Read Full Content

Latest

Open Source is Essential for Tomorrow's Digital Government

30 October 2026
Dashi Brings Umami's Food Magazine Demo to Drupal CMS

30 October 2026
How to Use AI Coding Agents on Drupal Projects with AGENTS.md, Tests and MCP

29 October 2026

Follow @thedroptimes