View Password - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-026 dlvr.it/TBK8w9

Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027 dlvr.it/TBdNSg

Opigno module - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-028 dlvr.it/TBdNTk

Opigno Learning path - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-029 dlvr.it/TBdNTs

Responsive and off-canvas menu - Moderately critical - Access bypass - SA-CONTRIB-2024-030 dlvr.it/TCCBYF

Opigno TinCan Question Type - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-031 dlvr.it/TCCBYd

Opigno - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-032 dlvr.it/TCCBYl

Advanced Varnish - Moderately critical - Access bypass - SA-CONTRIB-2024-033 dlvr.it/TCVC0z

Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034 dlvr.it/TCqRy2

Content Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035 dlvr.it/TCqRyP

Paragraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036 dlvr.it/TCqRyR

Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037 dlvr.it/TCqRyZ

Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038 dlvr.it/TCqRyz

Security Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039 dlvr.it/TD6pWK

File Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-040 dlvr.it/TD6pWt

Smart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041 dlvr.it/TDP7b6

Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 drupal.org/sa-core-2024-0… Only Drupal 10.0 through 10.2 are affected.

New Drupal core releases address XSS, access bypass, and a gadget chain hardening. The XSS issue is protected by the Drupal Steward service. Details on all 3 issues available at drupal.org/sa-core-2025-0… drupal.org/sa-core-2025-0… drupal.org/sa-core-2025-0…

The Drupal Security Team now has a Linkedin page. It will be for longer-form content than this channel, so participating in both communities is encouraged. Follow here linkedin.com/showcase/drupa…