Drupal security fix timeline
Public commits from drupal/drupal whose messages cite a vulnerability or a security fix. Patch text is not stored.
23 security-fix timeline events
Oct 14, 2026
Follow-up for SA-CORE-2026-016: update performance tests.
Follow-up for SA-CORE-2026-016: update performance tests.
Oct 14, 2026
fix: SA-CORE-2026-016
fix: SA-CORE-2026-016 By: erictee2802 By: hai27ii2o By: benjifisher By: jurgenhaas By: larowlan By: mingsong By: mohit_aghera By: neclimdul By: plopesc By: poker10 By: prudloff By: cilefen By: longwave By: xjm (cherry picked from commit 4fec58fb57c828b97d3565d97a0676c6bace51f1)
Oct 14, 2026
fix: SA-CORE-2026-015
fix: SA-CORE-2026-015 By: dev-winty By: benjifisher By: catch By: dcam By: fathershawn By: larowlan By: mcdruid By: mohit_aghera By: xjm By: akalata By: drumm By: greggles By: longwave By: neclimdul By: poker10 By: ram4nd (cherry picked from commit e5bda07db8b26c1ccafcab17a1066…
Oct 14, 2026
fix: SA-CORE-2026-014
fix: SA-CORE-2026-014 By: mcdruid By: ogalland-tob By: catch By: larowlan By: longwave By: xjm By: akalata By: bramdriesen By: greggles By: hestenet By: poker10 By: prudloff (cherry picked from commit ef786b7afce257c980f5d093cb08a5d4a8df86ba)
Jul 15, 2026
SA-CORE-2026-012 by hai27ii2o, danielveza, larowlan, mingsong, neclimdul, greggles, longwave, xjm
SA-CORE-2026-012 by hai27ii2o, danielveza, larowlan, mingsong, neclimdul, greggles, longwave, xjm
Jul 15, 2026
SA-CORE-2026-011 by prudloff, fathershawn, catch, larowlan, longwave, xjm
SA-CORE-2026-011 by prudloff, fathershawn, catch, larowlan, longwave, xjm
Jul 15, 2026
SA-CORE-2026-010 by offensive-ai, benjifisher, kim.pepper, mohit_aghera, catch, larowlan, poker10, xjm
SA-CORE-2026-010 by offensive-ai, benjifisher, kim.pepper, mohit_aghera, catch, larowlan, poker10, xjm
Jun 17, 2026
SA-CORE-2026-008 by 0xhamy, ama62, askibinski, ayalon, betah4k, gabesullice, john morahan, michaelwinser, nbanderso, offensive-a, plach, qquynh, unknownhad, larowlan, longwave, mcdruid, phenaproxima, seanb, benjifisher, cilefen, damienmcken
SA-CORE-2026-008 by 0xhamy, ama62, askibinski, ayalon, betah4k, gabesullice, john morahan, michaelwinser, nbanderso, offensive-a, plach, qquynh, unknownhad, larowlan, longwave, mcdruid, phenaproxima, seanb, benjifisher, cilefen, damienmckenna, dokumori, greggles, neclimdul, poke…
Jun 17, 2026
SA-CORE-2026-009 by cantina_security, bbrala, kim.pepper, larowlan, damienmckenna, greggles, poker10
SA-CORE-2026-009 by cantina_security, bbrala, kim.pepper, larowlan, damienmckenna, greggles, poker10 (cherry picked from commit aa6c3eb6e1ba358f5e1a5037d3e2b8006972af44)
Jun 17, 2026
SA-CORE-2026-007 by melih-acikoz, michaelwinser, willempje2, larowlan, catch, cilefen, greggles, neclimdul, poker10
SA-CORE-2026-007 by melih-acikoz, michaelwinser, willempje2, larowlan, catch, cilefen, greggles, neclimdul, poker10 (cherry picked from commit 93af65c047be13920c583a09e331aed4f2521acd)