Drupal security announcements

 Drupal Answers

Have the drop on
Jan 8 16:14
posted on January 06, 2025 by Drupal Security Team

Date:  2025-January-06 Description:  Drupal core version 7 has reached end of life, and is no longer community supported on Drupal.org. This means that new releases of Drupal 7 core and contributed projects will no longer happen on Drupal.org and community support is no longer provided. What this means for you: Any vulnerabilities that impact Drupal 7 may be released and made pu

Jun 26, 2024 15:45
posted on June 26, 2024 by Drupal Security Team

Date:  2024-June-26 Description:  Following on from previous PSAs on 3rd Party code in the Drupal ecosystem: PSA-2011-002 - External libraries and plugins Various 3rd Party Vulnerabilities - PSA-2019-09-04 | Drupal.org It is the policy of the Drupal Security Team that site owners are responsible for monitoring and maintaining the security of 3rd party libraries. Supply chains ar