Security advisories

These posts by the Drupal security team are also sent to the security announcements e-mail list.

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-004

Posted by Drupal Security Team on 16 Aug 2017 at 16:38 UTC

Drupal 8.3.7 is a maintenance release which contain fixes for security vulnerabilities.

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-003

Posted by Drupal Security Team on 21 Jun 2017 at 17:44 UTC

Drupal 8.3.4 and Drupal 7.56 are maintenance releases which contain fixes for security vulnerabilities.

Drupal Core - Critical - Access Bypass - SA-CORE-2017-002

Posted by Drupal Security Team on 19 Apr 2017 at 17:13 UTC

Advisory ID: DRUPAL-SA-CORE-2017-002
Project: Drupal core
Version: 8.x
Date: 2017-April-19
CVEID: CVE-2017-6919
Security risk: 17/25 ( Critical) AC:Basic/A:User/CI:All/II:All/E:Theoretical/TD:Default
Vulnerability: Access bypass

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-001

Posted by Drupal Security Team on 15 Mar 2017 at 19:24 UTC

Drupal 8.2.7, a maintenance release which contains fixes for security vulnerabilities, is now available for download.

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005

Posted by Drupal Security Team on 16 Nov 2016 at 17:37 UTC

Advisory ID: DRUPAL-SA-CORE-2016-005
Project: Drupal core
Version: 7.x, 8.x
Date: 2016-November-16
Security risk: 13/25 ( Moderately Critical) AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon
Vulnerability: Multiple vulnerabilities

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-004

Posted by Drupal Security Team on 21 Sep 2016 at 16:35 UTC

Advisory ID: DRUPAL-SA-CORE-2016-004
Project: Drupal core
Version:li 8.x
Date: 2016-September-21
Security risk: 18/25 ( Critical) AC:Basic/A:User/CI:Some/II:Some/E:Proof/TD:Default

Drupal Core - Highly Critical - Injection - SA-CORE-2016-003

Posted by Drupal Security Team on 18 Jul 2016 at 13:53 UTC

Advisory ID: DRUPAL-SA-CORE-2016-003
Project: Drupal core
Version: 8.x
Date: 2016-July-18
Security risk: 20/25 ( Highly Critical) AC:Basic/A:None/CI:All/II:All/E:Proof/TD:Default
Vulnerability: Injection

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002

Posted by Drupal Security Team on 15 Jun 2016 at 18:45 UTC

Advisory ID: DRUPAL-SA-CORE-2016-002
Project: Drupal core
Version: 7.x, 8.x
Date: 2016-June-15
Security risk: 11/25 ( Moderately Critical) AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon
Vulnerability: Access bypass, Multiple vulnerabilities

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001

Posted by Drupal Security Team on 24 Feb 2016 at 17:33 UTC

Advisory ID: SA-CORE-2016-001
Project: Drupal core
Version: 6.x, 7.x, 8.x
Date: 2016-February-24
Security risk: 15/25 ( Critical) AC:Basic/A:User/CI:Some/II:Some/E:Proof/TD:All
Vulnerability: Multiple vulnerabilities

Drupal Core - Overlay - Less Critical - Open Redirect - SA-CORE-2015-004

Posted by Drupal Security Team on 21 Oct 2015 at 19:16 UTC

Advisory ID: DRUPAL-SA-CORE-2015-004
Project: Drupal core
Version: 7.x
Date: 2015-October-21
Security risk: 9/25 ( Less Critical) AC:Basic/A:None/CI:None/II:None/E:Theoretical/TD:Default
Vulnerability: Open Redirect

Pages

Subscribe with RSS

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-004

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-003

Drupal Core - Critical - Access Bypass - SA-CORE-2017-002

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-001

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-005

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-004

Drupal Core - Highly Critical - Injection - SA-CORE-2016-003

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001

Drupal Core - Overlay - Less Critical - Open Redirect - SA-CORE-2015-004

Pages

Security announcements

Contacting the Security team

Writing secure code

Security books

News items

Our community

Documentation

Drupal code base

Governance of community