Drupal Security @drupalsecurity
Republish Drupal Security Advisories & related news. Follow Drupal Security Team. @mlh407 to get RT. DM & mentions not monitored. https://t.co/BswJZrKuK4 drupal.org/security Web Joined April 2009-
Tweets2K
-
Followers14K
-
Following23
-
Likes76
@jvandenbroeck Details on the Steward program and how to join are at drupal.org/drupal-securit…
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004 read more at drupal.org/sa-core-2026-0…
@sebreghtsjelle You can remove the `-recommended` part of that and then do the updates. If you prefer using -recommended in the long run, you could switch back to it later today.
Drupal-related security releases today include those referenced below. You can start updating dependencies from Symfony and doing testing steps now.
Site owners are encouraged to get their sites ready for a release of Drupal core that may affect them. Site owners should make upgrades easier (e.g. update to the most recent release, improve deployment automation, improve automated testing) given the current security climate.
Upcoming highly critical release on May 20, 2026 - PSA-2026-05-18 Read more: drupal.org/psa-2026-05-18
The Drupal Security Team now has a Linkedin page. It will be for longer-form content than this channel, so participating in both communities is encouraged. Follow here linkedin.com/showcase/drupa…
New Drupal core releases address XSS, access bypass, and a gadget chain hardening. The XSS issue is protected by the Drupal Steward service. Details on all 3 issues available at drupal.org/sa-core-2025-0… drupal.org/sa-core-2025-0… drupal.org/sa-core-2025-0…
Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002 drupal.org/sa-core-2024-0… Only Drupal 10.0 through 10.2 are affected.
Smart IP Ban - Critical - Access bypass - SA-CONTRIB-2024-041 dlvr.it/TDP7b6
File Entity (fieldable files) - Moderately critical - Information Disclosure - SA-CONTRIB-2024-040 dlvr.it/TD6pWt
Security Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039 dlvr.it/TD6pWK
Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038 dlvr.it/TCqRyz
Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037 dlvr.it/TCqRyZ
Paragraphs table - Critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-036 dlvr.it/TCqRyR
Content Entity Clone - Moderately critical - Information Disclosure - SA-CONTRIB-2024-035 dlvr.it/TCqRyP
Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034 dlvr.it/TCqRy2
Advanced Varnish - Moderately critical - Access bypass - SA-CONTRIB-2024-033 dlvr.it/TCVC0z
Drupal Association @drupalassoc
23K Followers 74 Following Follow us on LinkedIn, BlueSky and Mastodon for all the latest updates.
xjm @xjmdrupal
3K Followers 8 Following 🌷 ♀ MY BODY, MY CHOICE. ✊ 🪧 xjm on https://t.co/0OIoHTJOWU https://t.co/KOnDuM9rGR. Drupal core release manager. (she/her)
Gábor Hojtsy @gaborhojtsy
21K Followers 246 Following He/Him. Drupal Initiative Coordinator Coordinator working at Acquia. Father of two amazing kids.
Matt Glaman @nmdmatt
3K Followers 194 Following Principal Software Engineer at @acquia. Drupal developer, contributor, and speaker, https://t.co/MWUpsBwWYd mglaman.eth https://t.co/RfA2j10N20
Jeff Geerling @geerlingguy
92K Followers 5K Following Father, author, developer, maker. Sometimes called "an inflammatory enigma". #stl #ansible #k8s #raspberrypi #crohns #ostomy
Drupal @drupal
63K Followers 283 Following Follow us on LinkedIn, BlueSky and Mastodon for all the latest updates.
Mike Herchel's disemb... @mikeherchel
3K Followers 2K Following Not here anymore. Find me on the other apps. #Drupal core CSS maintainer. Former board @drupalassoc. Organizes @frontendawesome & @fldrupalcamp.
ultimike @ultimike
2K Followers 294 Following Florida-based Drupal developer and trainer. Mastadon: https://t.co/O3eKxFFk1J
DDEV @randyfay
3K Followers 572 Following #ddev maintainer, close ties to Drupal world, traveler on bicycle
Sam Mortenson @mortensonsam
2K Followers 2K Following Security engineer working on something new Follow me on bsky: https://t.co/RrMp7ikLcm
Baddy Sonja Breidert @baddysonja
2K Followers 860 Following I love Drupal - Co-Founder of @1xINTERNET - Digital Agency in DE, IS and ES- European Champion in Robotic soccer - Mom of two kids- Board Chair of @drupalassoc
The Drop is Always Mo... @DropIsMoving
2K Followers 39 Following Drupal core news archive. Posts were by @gaborhojtsy. Latest news on LinkedIn, https://t.co/rzEC5XEVgW Mastodon and BlueSky, same name.
@[email protected] @chx
5K Followers 119 Following [email protected] The Ghost of Drupal Past. Header: https://t.co/7bkr2DPFfM Fav playlist https://t.co/X9lgPz7MgZ Crypto Antagonist. The horrors persist but so do I
Sascha Eggenberger @saschaeggi
1K Followers 426 Following Staff Product Designer @GitLab. Speaker. @Drupal Starshot Track Lead. Creator of #GinAdminTheme. Co-organiser @frontzurich. #OpenSource #a11y
Alex Moreno @morenodotnet
2K Followers 2K Following #DeveloperRelations and Partner Manager @getpantheon Ex @DrupalAssociation @getpantheon @acquia Passionate about #communication #drupal #devrel #innovation
Asociación Drupal @DrupalAED
952 Followers 103 Following Ven por el software. Quédate por la comunidad.
Drupal 8 modules @drupal8modules
2K Followers 682 Following Keep track of all Drupal 8 core, distribution, module and theme releases. Updates every 10 minutes. Maintained by @pietervanleuven. Ping me for improvements!
Théodore Biadala @nod_
1K Followers 1K Following Priorities: Sleep, Family, Friends, Food, Fun, Work. https://t.co/w7IyFw3836 https://t.co/QbZVJxuAjE
Paweł Kuźma @pawel_kuzma
1 Followers 98 Following
c4t 🇲🇦 @catcommand
924 Followers 544 Following Offensive and Defensive Cyber, Pofessional chef @wyvernlabs, CTFs with @0xMoroccanCats.
Justin Kaufman @jkaufman001
117 Followers 641 Following Steelers fan, budding novelist, IT manager, Phi Delt (ΦΔΘ) - not necessarily in that order.
Drupal Coding @DrupalCoding
12 Followers 149 Following
Yunus Emre Balkis @Yunusemrebalkis
4 Followers 314 Following
Bilgisayariseviyoruz @Bilgisayarisev
156 Followers 5K Following
e4366eolywrgpidfbio @e4366eolywrgpi1
13 Followers 304 Following Doing some stuff with IT technology.
Mr SEO Perth @mrseoperth
16 Followers 67 Following
Cüneyt YAPAR @YaparCuneyt
26 Followers 937 Following Uzm.Hemşire 💊 Android & Windows Developer, Python & C++ programmer, IHA-2 Pilot, Chess Player 🏕️🧗
pioug @piougy
9 Followers 277 Following
oQır @qoldwan
678 Followers 1K Following
MNAB @mysterious1923
118 Followers 593 Following
Sefa TÜRKER @sftrkr
26 Followers 159 Following
Erdem Alkan @erdemalkandev
210 Followers 806 Following Co-founder & CTO @octohausio & @voxvil, Ex @bidolubaskicom #Drupal #OpenSource
Fernando Manzanarez @FernandoMa61306
16 Followers 3K Following
Uğur 🇹🇷 @_ugur_39
189 Followers 270 Following Hak Temelli Engelli Hakları Savunucusu, Hobi olarak Yazılım geliştiricisi, Bilişim Erişilebilirliği Uzmanı, TCK'da işçi. 29.10.2024 💌
dedephus @dedephus0x
5 Followers 225 Following
Greg Bartman @grzegorzbartman
855 Followers 227 Following Co-CEO & Co-founder at @droptica | #opensource #drupal #openclaw #productivity | @DrupalCampPol @openintranet @b2bforce
Liquid @Liquid86686634
0 Followers 28 Following
athene_noctua @athenenoctua0
3 Followers 183 Following
siva krishna @skginjupalli
0 Followers 10 Following
viv͎͎͎͎͎͎͎͎al... @vivelagloire
8 Followers 735 Following
Porterucho Velez @chinamaaa
67 Followers 470 Following
Bernard Barthelemy @BernardBarthel5
0 Followers 7 Following
Zaz @Zaz1535514
0 Followers 2 Following
xEndLe @_mouss_
32 Followers 351 Following
きんとーん @NtVeuh
133 Followers 901 Following ピアノが趣味のアラフォーワンオペ限界フルタイムワーママ。二代遡っても全員糖尿という2型糖尿のサラブレッド。基本はIT界隈、ハム関連のセキュリティ設計・運用界隈に棲んでいます。個人の落書きであり所属組織の見解ではありません。
Brooke Heaton @BrookeHeat43600
0 Followers 3 Following
Avelia Watson @AveliaWatson
20 Followers 179 Following
ByteProof Media @ByteProofMedia
87 Followers 288 Following
海老庵🦐 @evian
3K Followers 3K Following 福岡県民の百合豚。猫派。ポタオデエンジョイ勢。iFi-Audio iDSD Valkyrie, Noble Audio ONYX, アコエフYSM-F07/M, FAudio Project Y, ESSENCE AUDIO Core-ZERO, CA SSH, B&W Px8 S2, TAGO T3-01等。
Wayne Kemp @KempWaynekemp
0 Followers 2 Following
Mel Tajon @MelTajon
2K Followers 342 Following I build big-ass websites for big-ass colleges. My idea of a perfect date is YYYY-MM-DD.
たいがーあっぱ... @CG70844
0 Followers 15 Following
Palmyre @palmyrAyA
2 Followers 8 Following
Cecily Borzillo @cecrs
37 Followers 33 Following
mr_tbone @mr_tbone
4 Followers 73 Following
Nicole Vella @nicolevellaart
1K Followers 165 Following (She/they) Generative and Computer Artist. follow me on bsky, I don't really post here anymore https://t.co/oAgpXOzQr1
xjm @xjmdrupal
3K Followers 8 Following 🌷 ♀ MY BODY, MY CHOICE. ✊ 🪧 xjm on https://t.co/0OIoHTJOWU https://t.co/KOnDuM9rGR. Drupal core release manager. (she/her)
Dries Buytaert @Dries
37K Followers 17 Following Creator of Drupal, Drupal project lead, co-founder and Executive Chair of Acquia. Young Global Leader at WEF. Building the world we want to exist in.
Gábor Hojtsy @gaborhojtsy
21K Followers 246 Following He/Him. Drupal Initiative Coordinator Coordinator working at Acquia. Father of two amazing kids.
@suzannealdrich@hachy... @SuzanneAldrich
1K Followers 2K Following Internet technologist 👩💻 Security 🛡️ Performance 🏃♀️ Usability 🖐 She/Her/Hers 🙋♀️
Cathy YesCT @YesCT
2K Followers 2K Following struggle. she/her or they/them. working to reduce racism, and increase justice, amplifying voices. Avatar by @MtfoxX3 Mastodon: @[email protected]
@[email protected]... @larowlan
1K Followers 0 Following this site promotes facism and disinformation, do not use it
David Snopek @dsnopek
670 Followers 584 Following Entrepreneur, software developer, language learner.
Ben Dougherty @_benjy1
498 Followers 296 Following Drupal 8 Migrate maintainer, Drupal Security Team member and senior developer at @Unearthed_S
Mike @mlh407
262 Followers 154 Following
Ben Jeavons @benswords
1K Followers 532 Following what is everything to someone and nothing to everyone else / he/him
Mori Sugimoto @dokumori
451 Followers 112 Following
catch @catch56
3K Followers 909 Following Improvised music, Drupal, communism. he/him https://t.co/xRfR2OlnaV
webchick @webchick
19K Followers 15K Following Lead Community Cat Herder @temporalio. Formerly @aiven_io @MongoDB @Drupal. @OReillyMedia author. Lesbionic Ace Mom. #AuDHD. Gendermeh. Gamer. Views my own.
James Gilliland @neclimdul
266 Followers 259 Following @[email protected] Distilled random Google searches. Not the ECETI guy. Generic opinions are my own stmt. He/Him.
weitzman @weitzman
4K Followers 360 Following Core Drupal developer. Maintainer of Drush. Available for freelance gigs. I don't use Twitter anymore. Find me at 🦋 https://t.co/UcgtsHonRr
David Strauss @DavidStrauss
4K Followers 3K Following Mostly active here: https://t.co/4TBgJXTBid @amutablesystems, @GetPantheon, #systemd, @Drupal
Dave Reid @davereid
5K Followers 1K Following Lead Engineer for Lullabot, and contributor to open source CMS Drupal. Working hard to become a runner. he/him checks out @[email protected]
Greg Knaddison @greggles
4K Followers 669 Following Work to keep animals healthy, Denver based, Drupal developer, security-minded, live-music-fan. he/him. https://t.co/8Zq90LYPHf
Crackalacking Drupal @CrackingDrupal
296 Followers 47 Following The only book to focus on Drupal Security. See also @greggles @drupalsecurity @card @drupalscoutYou might like
