Project:  Drupal core Date:  2025-February-19 Security risk:  Critical 17 ∕ 25 AC:Basic/A:None/CI:Some/II:Some/E:Proof/TD:All Vulnerability:  Cross site scripting Affected versions:  >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 Description:  Drupal core doesn't sufficiently filter error mess…

Project:  Drupal core Date:  2025-February-19 Security risk:  Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability:  Access bypass Affected versions:  >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 Description:  Bulk operations allow authorized use…

Project:  Drupal core Date:  2025-February-19 Security risk:  Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability:  Gadget Chain Affected versions:  >= 8.0.0 < 10.3.13 || >= 10.4.0 < 10.4.3 || >= 11.0.0 < 11.0.12 || >= 11.1.0 < 11.1.3 Description:  Drupal core contains a potential PH…