These posts by the Drupal security team are also sent to the security announcements e-mail list.

Drupal Core - Critical - Access Bypass - SA-CORE-2017-002

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-001

Drupal 8.2.7, a maintenance release which contains fixes for security vulnerabilities, is now available for download.

Drupal Core - Highly Critical - Injection - SA-CORE-2016-003

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002


Subscribe with RSS Subscribe to RSS - Security advisories for Drupal core