Early access: this site has moved to bugrater.com.

Security releases

Drupal

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011

SA-CORE-2026-011 Jul 15, 2026 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-core-2026-011. 1 reporter(s), 2 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-core-2026-011
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines
No lines match. · clear filters
Nothing here matches those filters. Clear them to see all 2 lines.