Drupal security fix timeline
Public commits from drupal/drupal whose messages cite a vulnerability or a security fix. Patch text is not stored.
23 security-fix timeline events
Jun 17, 2026
SA-CORE-2026-006 by michaelmaturi, larowlan, mohit_aghera, akalata, benjifisher, cilefen, greggles, longwave, mcdruid, poker10, xjm
SA-CORE-2026-006 by michaelmaturi, larowlan, mohit_aghera, akalata, benjifisher, cilefen, greggles, longwave, mcdruid, poker10, xjm (cherry picked from commit 7b0fc80ebfadc8c6aefcad913d64e0263a624297)
Jun 17, 2026
SA-CORE-2026-005 by michaelmaturi, bbrala, berdir, larowlan, longwave, mcdruid, akalata, benjifisher, damienmckenna, david strauss, drumm, greggles, hestenet, poker10, ram4nd, xjm
SA-CORE-2026-005 by michaelmaturi, bbrala, berdir, larowlan, longwave, mcdruid, akalata, benjifisher, damienmckenna, david strauss, drumm, greggles, hestenet, poker10, ram4nd, xjm (cherry picked from commit 4bfbbd7e3ed305eb43e18f64a301f71b7d4e5e20)
Jun 9, 2026
task: #3522220 Add tests for SA-CORE-2025-003
task: #3522220 Add tests for SA-CORE-2025-003 By: mcdruid By: smustgrave By: nicxvan By: ghost of drupal past By: longwave By: shin24
Jun 9, 2026
task: #3593777 Add tests for SA-CORE-2025-001
task: #3593777 Add tests for SA-CORE-2025-001 By: prudloff By: smustgrave By: larsdesigns By: mcdruid By: catch By: greggles By: benjifisher By: longwave By: hestenet
Jun 3, 2026
task: #3592099 Add tests for SA-CORE-2021-002
task: #3592099 Add tests for SA-CORE-2021-002 By: prudloff By: smustgrave By: alexpott By: Jasu_M By: mlhess By: pwolanin By: xjm By: samuel.mortenson By: nwellnhof By: effulgentsia By: larowlan By: phenaproxima By: mcdruid
May 26, 2026 · CVE-2026-46644
task: #3592065 Drupal core-recommended pins vulnerable symfony/polyfill-intl-idn version affected by CVE-2026-46644
task: #3592065 Drupal core-recommended pins vulnerable symfony/polyfill-intl-idn version affected by CVE-2026-46644 By: ahmetburkan By: godotislate By: znerol
May 20, 2026
SA-CORE-2026-004 by michaelmaturi, longwave, catch, bbrala, mcdruid, larowlan, xjm, benjifisher, poker10, greggles, hestenet, damienmckenna, heine
SA-CORE-2026-004 by michaelmaturi, longwave, catch, bbrala, mcdruid, larowlan, xjm, benjifisher, poker10, greggles, hestenet, damienmckenna, heine (cherry picked from commit ea9524d9c75dd4fcbaf5d4a823c7f571de7d546c)
Apr 15, 2026
SA-CORE-2026-002 by hswww, menon, t-chen, benjifisher, cilefen, drumm, greggles, larowlan, longwave, mcdruid, ram4nd, xjm, poker10
SA-CORE-2026-002 by hswww, menon, t-chen, benjifisher, cilefen, drumm, greggles, larowlan, longwave, mcdruid, ram4nd, xjm, poker10 (cherry picked from commit 0cf26c62bc4808e3473a61a93183fbaa1fba278c)
Apr 15, 2026
SA-CORE-2026-003 by cantina_security, dries, shirshaw64@gmail.com, larowlan, mcdruid, mingsong, damienmckenna, greggles, poker10, xjm
SA-CORE-2026-003 by cantina_security, dries, shirshaw64@gmail.com, larowlan, mcdruid, mingsong, damienmckenna, greggles, poker10, xjm (cherry picked from commit 8232489c2ded1170f3eb9ad7b68d686fe625ddfc)
Apr 15, 2026
SA-CORE-2026-001 by murat_kekic, akalata, benjifisher, drumm, larowlan, mlhess, neclimdul, pandaski, poker10, ram4nd, xjm, prufloff, greggles
SA-CORE-2026-001 by murat_kekic, akalata, benjifisher, drumm, larowlan, mlhess, neclimdul, pandaski, poker10, ram4nd, xjm, prufloff, greggles (cherry picked from commit 8812078f73e6cf172b2b9722882a1a2a0ec00b86)