Technology hubs · Drupal

Drupal security fix timeline

Public commits from drupal/drupal whose messages cite a vulnerability or a security fix. Patch text is not stored.

Drupal hub Vulnerability catalog

23 security-fix timeline events

Jan 12, 2026 · CVE-2025-64756
task: #3562214 Upgrade glob because of CVE-2025-64756
task: #3562214 Upgrade glob because of CVE-2025-64756 By: lobodakyrylo By: quietone By: longwave
CVE-2025-64756 https://github.com/drupal/drupal/commit/44a2548e982ffd9f1f9f8316285fa820d82021ab
Nov 12, 2025
SA-CORE-2025-008 by damienmckenna, tame4tex, benjifisher, mohit_aghera, larowlan, mingsong, xjm, neclimdul, catch, drumm, poker10
SA-CORE-2025-008 by damienmckenna, tame4tex, benjifisher, mohit_aghera, larowlan, mingsong, xjm, neclimdul, catch, drumm, poker10 (cherry picked from commit 1f32c7c2a6bba06161b66921255a6d9de65aadca)
https://github.com/drupal/drupal/commit/d2a47e6fd74dde54f426538120cfcdff1944b063
Feb 3, 2025 · CVE-2025-24374
Issue #3503195 by alexpott, longwave, loopy1492: Twig needs updating for CVE-2025-24374
Issue #3503195 by alexpott, longwave, loopy1492: Twig needs updating for CVE-2025-24374
CVE-2025-24374 https://github.com/drupal/drupal/commit/22ab55734fba7183589c640c55a17cb63b115dc0