Security update

Protected Pages - Critical - Access bypass - SA-CONTRIB-2023-013

Xray Audit - Moderately critical - Cross site scripting - SA-CONTRIB-2023-012

This is a security release.

The module does not sufficiently sanitize some data presented in its reports. This vulnerability is mitigated by the fact that an attacker must have a role with permissions to administer an impacted content type.

This is a security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004

No other fixes are included.

This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-002
• Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-003
• Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004

No other fixes are included.

This is a security release of the Drupal 9 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-002
• Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-003
• Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004

No other fixes are included.

This is a security release of the Drupal 10 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:
​

• Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-002
• Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-003
• Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004

​
No other fixes are included.