Security update

This is a non-production site

- Drupal Core Drupal CMS puts the power of Drupal into the hands of marketers, designers and content creators
- Drupal CMS Drupal CMS puts the power of Drupal into the hands of marketers, designers and content creators
- Drupal AI Open limitless possibilities with Drupal AI
- Case Studies Powerful stories that show Drupal solutions in the real world
- Drupal for Government Drupal is the open-source CMS that enables digital transformation of government and increases citizen engagement
- Drupal for Higher Education See why 70% of the world's leading universities chose Drupal
- Drupal for Nonprofit See why Drupal is the open-source CMS choice for some of the world’s most influential nonprofits
- Drupal for eCommerce Natively integrate content and commerce
- Drupal for FinTech Secure and trustworthy FinTech infrastructure
- Drupal for Healthcare Drupal powers systems that are secure, patient-centric and engaging
- Drupal for Media & Publishing Create engaging multi-channel experiences to connect with your audiences - everywhere
- Download Drupal Download Drupal and the extensions you need
- Documentation Full knowledgebase including Drupal 7 resources
- Getting Started Guide to installing Drupal on a server
- Local Development Guide Guide to installing Drupal locally with Docker and DDEV
- Developer Resources Step-by-step guide for learning Drupal
- Drupal User Guide Learn to build with Drupal
- API Complete documentation of Drupal Core APIs
- Modules Extend your project's functionality
- Themes Change your project's look and feel
- Distributions Jumpstart your project with a pre-configured install
- Issues Queue Report issues and contribute improvements
- Security Advisories Stay on top of the latest security alerts and updates
- Find a Drupal Certified Partner Connect with the best Drupal agencies around the world
- Become an Drupal Certified Partner Join an elite network of agencies committed to Drupal excellence and innovation
- Find a Hosting Provider Find a hosting provider for your Drupal project
- Find a Migration Partner Get help with your migration to the latest version of Drupal
- Find Training Upskill your Drupal team
- Drupal Steward Ensure your website is protected with Drupal Steward
- About the Community Come for the code, stay for the community
- How to Contribute Get involved in growing and evolving Drupal
- DrupalCon DrupalCon unites experts from around the globe who create ambitious digital experiences. Network, learn, and be inspired
- Events Discover local events, meet-ups, and training
- Jobs / Careers Find opportunities to work in Drupal
- News & Blogs News and stories about Drupal
- Forum Got a question about Drupal? Find answers on the Drupal forums
- Slack Get support and communicate with the global Drupal community
- Newsletters Sign up for Drupal news and manage your subscriptions
- Drupal Swag Shop Get your Drupal branded merch!
- The Drupal Association Learn how we support Drupal's growth and innovation - and how you can help
- Become a Member Become a Ripplemaker and support the Drupal Association
- Become a Drupal Certified Partner Join an elite network of agencies committed to Drupal excellence and innovation
- Donate Make a donation to the nonprofit that supports Drupal
- Log in
- Create account
- Try Drupal CMS
- Try hosting

drupal 9.3.6

Posted by xjm on February 16, 2022 at 4:32pm

Maintenance and security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

9.3.6

Security update

Insecure

Read more about drupal 9.3.6

quickedit 1.0.1

Posted by dww on February 16, 2022 at 7:54am

See Quick Edit - Moderately critical - Access bypass - SA-CONTRIB-2022-025.

1.0.1

Security update

Bug fixes

Read more about quickedit 1.0.1

fancy_file_delete 2.0.7

Posted by ikit-claw on February 8, 2022 at 3:19pm

Fixes: Fancy File Delete - Moderately critical - Access Bypass - SA-CONTRIB-2022-023

2.0.7

Security update

Read more about fancy_file_delete 2.0.7

rate 7.x-1.8

Posted by jordik on January 31, 2022 at 5:20pm

Fixes Rate - Critical - Unsupported - SA-CONTRIB-2022-010

Versions affected: Rate 7.x-1.x versions prior to 7.x-1.8.
Solution: Install the latest version (7.x-1.8).

7.x-1.8

Security update

Read more about rate 7.x-1.8

navbar 7.x-1.8

Posted by dsnopek on January 26, 2022 at 12:48pm

Fixes Navbar - Moderately critical - Cross Site Scripting - SA-CONTRIB-2022-011

7.x-1.8

Security update

Read more about navbar 7.x-1.8

private_taxonomy 7.x-1.11

Posted by cmlara on January 26, 2022 at 7:15am

Private Taxonomy Terms - Critical - Access bypass, Information Disclosure, Multiple vulnerabilities - SA-CONTRIB-2022-014

7.x-1.11

Security update

Read more about private_taxonomy 7.x-1.11

private_taxonomy 8.x-2.5

Posted by cmlara on January 26, 2022 at 7:14am

Private Taxonomy Terms - Critical - Access bypass, Information Disclosure, Multiple vulnerabilities - SA-CONTRIB-2022-014

8.x-2.5

Security update

Insecure

Read more about private_taxonomy 8.x-2.5

custom_breadcrumbs 1.0.1

Posted by lamp5 on January 25, 2022 at 11:25am

Fixes: Custom Breadcrumbs - Less critical - Cross Site Scripting - SA-CONTRIB-2022-024

Changes since 1.0.0

[#3221780]
[#3254041]

1.0.1

Security update

Bug fixes

Read more about custom_breadcrumbs 1.0.1

semver_example 2.3.1

Posted by moshe weitzman on January 21, 2022 at 5:54pm

This release will not get a security announcement, as this project is used in creating test fixtures, and not practically used.

Expanded README.

2.3.1

Security update

Read more about semver_example 2.3.1

drupal 7.86

Posted by xjm on January 19, 2022 at 3:51pm

Maintenance and security release of the Drupal 7 series.

Note that this security release introduced a regression which was fixed in Drupal 7.87.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement: