Following from #3577089: Create CVEs for March 2026

We should create CVEs for recent advisories.

Maintainers and reporters of modules (and anyone else), we welcome your thoughts and advice about the CWE and CAPEC to assign to these issues.

In chronological order they are:
https://www.drupal.org/sa-contrib-2026-031
https://www.drupal.org/sa-contrib-2026-032
https://www.drupal.org/sa-core-2026-001
https://www.drupal.org/sa-core-2026-002
https://www.drupal.org/sa-core-2026-003
https://www.drupal.org/sa-contrib-2026-033

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

greggles created an issue. See original summary.

greggles’s picture

Issue summary: View changes

greggles’s picture

Status: Active » Needs review

I plan to create these tomorrow. Feedback very welcome, but if folks have thoughts after I create them we can always edit them.

  • greggles committed 576966c8 on 7.x-1.x
    Fix #3582693: Create CVEs for April 2026
    
greggles’s picture

Title: Create CVEs for April 2026 » Create CVEs for April and early May 2026
Status: Needs review » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.