Drupal

Drupal Core Remote Code Execution Vulnerability

In CISA KEVRansomware

Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004

In CISA KEVRansomware

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

In CISA KEV

Drupal core Un-restricted Upload of File

In CISA KEV

Drupal core - Highly critical - Remote Code Execution

In CISA KEV

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

In CISA KEV

PEAR Archive_Tar Improper Link Resolution Vulnerability

In CISA KEV

Potential XSS vulnerability in jQuery

In CISA KEV

PHAR stream wrapper Arbitrary PHP code execution

Drupal.org Drupal Core: Code Execution

LocalGov Workflows - Moderately critical - Information disclosure - SA-CONTRIB-2026-039

PHP: security vulnerability

SensioLabs Symfony: SQL Injection

TYPO3 PharStreamWrapper: Deserialization of Untrusted Data

PHP Group Archive Tar: security vulnerability

Drupal Docker Images: security vulnerability

Robbin Zhao Avatar Uploader: security vulnerability

jQuery has a potential XSS vulnerability

Drupal Storage API: Code Execution

SensioLabs Symfony: security vulnerability

XSS in the `of` option of the `.position()` util

XSS in the `altField` option of the Datepicker widget

Drupal core: security vulnerability

Drupal core: security vulnerability

Jquery UI: Cross-Site Scripting (XSS)