These posts by the Drupal security team are also sent to the security announcements e-mail list.

Drupal Core - Critical - Access Bypass - SA-CORE-2017-002

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-001

Drupal 8.2.7, a maintenance release which contains fixes for security vulnerabilities, is now available for download.

Drupal Core - Highly Critical - Injection - SA-CORE-2016-003

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001

Drupal Core - Overlay - Less Critical - Open Redirect - SA-CORE-2015-004

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2015-003

Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2015-002

Pages

Subscribe with RSS Subscribe to Security advisories