Drupal Security @drupalsecurity
Republish Drupal Security Advisories & related news. Follow Drupal Security Team. @mlh407 to get RT. DM & mentions not monitored. https://t.co/BswJZrKuK4 drupal.org/security Web Joined April 2009-
Tweets2K
-
Followers14K
-
Following23
-
Likes76
@jvandenbroeck Details on the Steward program and how to join are at drupal.org/drupal-securit…
0
0
0
32
0
View Details
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 read more at drupal.org/sa-core-2026-0…
@sebreghtsjelle You can remove the `-recommended` part of that and then do the updates. If you prefer using -recommended in the long run, you could switch back to it later today.
Drupal-related security releases today include those referenced below. You can start updating dependencies from Symfony and doing testing steps now.
Site owners are encouraged to get their sites ready for a release of Drupal core that may affect them. Site owners should make upgrades easier (e.g. update to the most recent release, improve deployment automation, improve automated testing) given the current security climate.
Upcoming highly critical release on May 20, 2026 - PSA-2026-05-18 Read more: drupal.org/psa-2026-05-18
The Drupal Security Team now has a Linkedin page. It will be for longer-form content than this channel, so participating in both communities is encouraged. Follow here linkedin.com/showcase/drupa…
New Drupal core releases address XSS, access bypass, and a gadget chain hardening. The XSS issue is protected by the Drupal Steward service. Details on all 3 issues available at drupal.org/sa-core-2025-0… drupal.org/sa-core-2025-0… drupal.org/sa-core-2025-0…
Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 drupal.org/sa-core-2024-0… Only Drupal 10.0 through 10.2 are affected.
Smart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041 dlvr.it/TDP7b6
File Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-040 dlvr.it/TD6pWt
Security Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039 dlvr.it/TD6pWK
Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038 dlvr.it/TCqRyz
Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037 dlvr.it/TCqRyZ
Paragraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036 dlvr.it/TCqRyR
Content Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035 dlvr.it/TCqRyP
Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034 dlvr.it/TCqRy2
Advanced Varnish - Moderately critical - Access bypass - SA-CONTRIB-2024-033 dlvr.it/TCVC0z
Drupal Association @drupalassoc
23K Followers 74 Following Follow us on LinkedIn, BlueSky and Mastodon for all the latest updates.
xjm @xjmdrupal
3K Followers 8 Following 🌷 ♀ MY BODY, MY CHOICE. ✊ 🪧 xjm on https://t.co/0OIoHTJOWU https://t.co/KOnDuM9rGR. Drupal core release manager. (she/her)
Gábor Hojtsy @gaborhojtsy
21K Followers 245 Following He/Him. Drupal Initiative Coordinator Coordinator working at Acquia. Father of two amazing kids.
Matt Glaman @nmdmatt
3K Followers 193 Following Principal Software Engineer at @acquia. Drupal developer, contributor, and speaker, https://t.co/MWUpsBwWYd mglaman.eth https://t.co/RfA2j10N20
Jeff Geerling @geerlingguy
96K Followers 5K Following Father, author, developer, maker. Sometimes called "an inflammatory enigma". #stl #ansible #k8s #raspberrypi #crohns #ostomy
Drupal @drupal
63K Followers 282 Following Follow us on LinkedIn, BlueSky and Mastodon for all the latest updates.
Mike Herchel's disemb... @mikeherchel
3K Followers 2K Following Not here anymore. Find me on the other apps. #Drupal core CSS maintainer. Former board @drupalassoc. Organizes @frontendawesome & @fldrupalcamp.
ultimike @ultimike
3K Followers 296 Following Florida-based Drupal developer and trainer. Mastadon: https://t.co/O3eKxFFk1J
DDEV @randyfay
3K Followers 572 Following #ddev maintainer, close ties to Drupal world, traveler on bicycle
Sam Mortenson @mortensonsam
2K Followers 2K Following Security engineer working on something new Follow me on bsky: https://t.co/RrMp7ikLcm
Baddy Sonja Breidert @baddysonja
2K Followers 859 Following I love Drupal - Co-Founder of @1xINTERNET - Digital Agency in DE, IS and ES- European Champion in Robotic soccer - Mom of two kids- Board Chair of @drupalassoc
The Drop is Always Mo... @DropIsMoving
2K Followers 39 Following Drupal core news archive. Posts were by @gaborhojtsy. Latest news on LinkedIn, https://t.co/rzEC5XEVgW Mastodon and BlueSky, same name.
@[email protected] @chx
5K Followers 118 Following [email protected] The Ghost of Drupal Past. Header: https://t.co/7bkr2DPFfM Fav playlist https://t.co/X9lgPz7MgZ Crypto Antagonist. The horrors persist but so do I
Sascha Eggenberger @saschaeggi
1K Followers 426 Following Staff Product Designer @GitLab. Speaker. @Drupal Starshot Track Lead. Creator of #GinAdminTheme. Co-organiser @frontzurich. #OpenSource #a11y
Alex Moreno @morenodotnet
2K Followers 2K Following #DeveloperRelations and Partner Manager @getpantheon Ex @DrupalAssociation @getpantheon @acquia Passionate about #communication #drupal #devrel #innovation
Asociación Drupal @DrupalAED
950 Followers 103 Following Ven por el software. Quédate por la comunidad.
Drupal 8 modules @drupal8modules
2K Followers 679 Following Keep track of all Drupal 8 core, distribution, module and theme releases. Updates every 10 minutes. Maintained by @pietervanleuven. Ping me for improvements!
Théodore Biadala @nod_
1K Followers 1K Following Priorities: Sleep, Family, Friends, Food, Fun, Work. https://t.co/w7IyFw3836 https://t.co/QbZVJxuAjE
Ahoy Brownsville, Tex... @ahoybrownsville
13 Followers 171 Following Moving within weeks to beautiful Brownsville, Texas, near the Starbase Spaceport.
Founder & CEO, Future... @FutureStack_AI_
12 Followers 190 Following Realtors: We’re building an intelligent Agentic AI platform for you specifically | Founder & CEO @ FutureStack AI
Digital Image Builder... @DigitalImaBuil
4 Followers 7 Following Expertos en desarrollo Drupal en Colombia. Agencia de diseño web, comercio electrónico, IA y SEO. Soluciones profesionales para tu negocio. ¡Contáctanos!
Chris Meyer @webase
117 Followers 556 Following Entrepreneur and Co-Founder of Berlin Drupal Studio Meyer Misgin Media
Haroun @HarounRiah
1 Followers 551 Following
sadboy @sadboysmyd
1 Followers 33 Following
Paweł Kuźma @pawel_kuzma
1 Followers 103 Following
c4t 🇲🇦 @catcommand
940 Followers 587 Following Offensive and Defensive Cyber, Pofessional chef @wyvernlabs, CTFs with @0xMoroccanCats, Space Security and Space Hobbyist 🛰️
Justin Kaufman @jkaufman001
117 Followers 641 Following Steelers fan, budding novelist, IT manager, Phi Delt (ΦΔΘ) - not necessarily in that order.
Drupal Coding @DrupalCoding
12 Followers 156 Following
Yunus Emre Balkis @Yunusemrebalkis
4 Followers 325 Following
Bilgisayariseviyoruz @Bilgisayarisev
158 Followers 5K Following
e4366eolywrgpidfbio @e4366eolywrgpi1
14 Followers 310 Following Doing some stuff with IT technology.
Mr SEO Perth @mrseoperth
17 Followers 69 Following
Cüneyt YAPAR @YaparCuneyt
26 Followers 1K Following Uzm.Hemşire 💊 Android & Windows Developer, Python & C++ programmer, IHA-2 Pilot, Chess Player 🏕️🧗
pioug @piougy
9 Followers 286 Following
oQır @qoldwan
674 Followers 1K Following
MNAB @mysterious1923
115 Followers 593 Following
sefa @_sefa_turker
26 Followers 169 Following
Erdem Alkan @erdemalkandev
212 Followers 811 Following Co-founder & CTO @octohausio & @voxvil, Ex @bidolubaskicom #Drupal #OpenSource
Fernando Manzanarez @FernandoMa61306
15 Followers 4K Following
Uğur 🇹🇷 @_ugur_39
186 Followers 269 Following Hak Temelli Engelli Hakları Savunucusu, Hobi olarak Yazılım geliştiricisi, Bilişim Erişilebilirliği Uzmanı, TCK'da işçi. 29.10.2024 💌
dedephus @dedephus0x
15 Followers 326 Following
Grzegorz Bartman @grzegorzbartman
881 Followers 169 Following Co-CEO & Co-founder at @droptica | #opensource #drupal #openclaw #ai #productivity | @DrupalCampPol @openintranet @b2bforce
Liquid @Liquid86686634
0 Followers 28 Following
athene_noctua @athenenoctua0
3 Followers 189 Following
siva krishna @skginjupalli
0 Followers 10 Following
viv͎͎͎͎͎͎͎͎al... @vivelagloire
8 Followers 734 Following
Porterucho Velez @chinamaaa
66 Followers 476 Following
Bernard Barthelemy @BernardBarthel5
0 Followers 10 Following
Zaz @Zaz1535514
0 Followers 2 Following
xEndLe @_mouss_
30 Followers 361 Following
きんとーん @NtVeuh
133 Followers 963 Following ピアノが趣味のアラフォーワンオペ限界フルタイムワーママ。二代遡っても全員糖尿という2型糖尿のサラブレッド。基本はIT界隈、ハム関連のセキュリティ設計・運用界隈に棲んでいます。個人の落書きであり所属組織の見解ではありません。
Brooke Heaton @BrookeHeat43600
0 Followers 3 Following
Avelia Watson @AveliaWatson
20 Followers 179 Following
ByteProof Media @ByteProofMedia
88 Followers 287 Following
海老庵🦐 @evian
3K Followers 3K Following 福岡県民の百合豚。猫派。ポタオデエンジョイ勢。iFi-Audio iDSD Valkyrie, Noble Audio Kaiser Encore C, アコエフYSM-F07/M, FAudio Project Y, ESSENCE AUDIO Core-ZERO, CA SSH, B&W Px8 S2等。
Wayne Kemp @KempWaynekemp
0 Followers 2 Following
xjm @xjmdrupal
3K Followers 8 Following 🌷 ♀ MY BODY, MY CHOICE. ✊ 🪧 xjm on https://t.co/0OIoHTJOWU https://t.co/KOnDuM9rGR. Drupal core release manager. (she/her)
Dries Buytaert @Dries
37K Followers 18 Following Creator of Drupal, Drupal project lead, co-founder and Executive Chair of Acquia. Young Global Leader at WEF. Building the world we want to exist in.
Gábor Hojtsy @gaborhojtsy
21K Followers 245 Following He/Him. Drupal Initiative Coordinator Coordinator working at Acquia. Father of two amazing kids.
@suzannealdrich@hachy... @SuzanneAldrich
1K Followers 2K Following Internet technologist 👩💻 Security 🛡️ Performance 🏃♀️ Usability 🖐 She/Her/Hers 🙋♀️
Cathy YesCT @YesCT
2K Followers 2K Following struggle. she/her or they/them. working to reduce racism, and increase justice, amplifying voices. Avatar by @MtfoxX3 Mastodon: @[email protected]
@[email protected]... @larowlan
1K Followers 0 Following this site promotes facism and disinformation, do not use it
David Snopek @dsnopek
670 Followers 584 Following Entrepreneur, software developer, language learner.
Ben Dougherty @_benjy1
496 Followers 296 Following Drupal 8 Migrate maintainer, Drupal Security Team member and senior developer at @Unearthed_S
Mike @mlh407
260 Followers 152 Following
Ben Jeavons @benswords
1K Followers 541 Following what is everything to someone and nothing to everyone else / he/him
Mori Sugimoto @dokumori
450 Followers 112 Following
catch @catch56
3K Followers 903 Following Improvised music, Drupal, communism. he/him https://t.co/xRfR2OlnaV
webchick @webchick
19K Followers 15K Following Lead Community Cat Herder @temporalio. Formerly @aiven_io @MongoDB @Drupal. @OReillyMedia author. Lesbionic Ace Mom. #AuDHD. Gendermeh. Gamer. Views my own.
James Gilliland @neclimdul
264 Followers 257 Following @[email protected] Distilled random Google searches. Not the ECETI guy. Generic opinions are my own stmt. He/Him.
weitzman @weitzman
4K Followers 366 Following Core Drupal developer. Maintainer of Drush. Available for freelance gigs. I don't use Twitter anymore. Find me at 🦋 https://t.co/UcgtsHonRr
David Strauss @DavidStrauss
4K Followers 3K Following Mostly active here: https://t.co/4TBgJXTBid @amutablesystems, @GetPantheon, #systemd, @Drupal
Dave Reid @davereid
5K Followers 1K Following Lead Engineer for Lullabot, and contributor to open source CMS Drupal. Working hard to become a runner. he/him checks out @[email protected]
Greg Knaddison @greggles
3K Followers 668 Following Work to keep animals healthy, Denver based, Drupal developer, security-minded, live-music-fan. he/him. https://t.co/8Zq90LYPHf
Crackalacking Drupal @CrackingDrupal
294 Followers 47 Following The only book to focus on Drupal Security. See also @greggles @drupalsecurity @card @drupalscoutYou might like
Dries Buytaert
@Dries
37K Followers
Matt Glaman
@nmdmatt
3K Followers
Drupalize.Me
@drupalizeme
4K Followers
DrupalEasy
@DrupalEasy
2K Followers
Acquia
@acquia
45K Followers
DrupalCon Rotterdam 2...
@DrupalConEur
5K Followers
webchick
@webchick
19K Followers
Damien McKenna
@DamienMcKenna
2K Followers
weitzman
@weitzman
4K Followers
Gábor Hojtsy
@gaborhojtsy
21K Followers