Contribution Records organization listing | Drupal.org

- Drupal Core The open source framework behind millions of websites
- Drupal CMS Drupal CMS puts the power of Drupal into the hands of marketers, designers and content creators
- Drupal AI Open limitless possibilities with Drupal AI
- Case Studies Powerful stories that show Drupal solutions in the real world
- Drupal for Government Drupal is the open-source CMS that enables digital transformation of government and increases citizen engagement
- Drupal for Higher Education See why 70% of the world's leading universities chose Drupal
- Drupal for Nonprofit See why Drupal is the open-source CMS choice for some of the world’s most influential nonprofits
- Drupal for eCommerce Natively integrate content and commerce
- Drupal for FinTech Secure and trustworthy FinTech infrastructure
- Drupal for Healthcare Drupal powers systems that are secure, patient-centric and engaging
- Drupal for Enterprise Why enterprise organizations choose Drupal for multi-brand governance and global scale.
- Drupal for Retail See how Drupal delivers retail experiences across every channel and touchpoint.
- Drupal for Travel & Tourism Discover how Drupal powers travel across websites, mobile, and onboard experiences.
- Download Drupal Download Drupal and the extensions you need
- Documentation Full knowledgebase including Drupal 7 resources
- Getting Started Guide to installing Drupal on a server
- Local Development Guide Guide to installing Drupal locally with Docker and DDEV
- Developer Resources Step-by-step guide for learning Drupal
- Drupal User Guide Learn to build with Drupal
- API Complete documentation of Drupal Core APIs
- Modules Extend your project's functionality
- Themes Change your project's look and feel
- Recipes Automate module installation and configuration
- Site Templates Complete, configured starting points for your Drupal website
- Issue Queues Report issues and contribute improvements
- Security Advisories Stay on top of the latest security alerts and updates
- Find a Drupal Certified Partner Connect with the best Drupal agencies around the world
- Become a Drupal Certified Partner Join an elite network of agencies committed to Drupal excellence and innovation
- Find a Hosting Provider Find a hosting provider for your Drupal project
- Find a Migration Partner Get help with your migration to the latest version of Drupal
- Find Training Upskill your Drupal team
- Drupal Steward Ensure your website is protected with Drupal Steward
- About the Community Come for the code, stay for the community
- How to Contribute Get involved in growing and evolving Drupal
- DrupalCon DrupalCon unites experts from around the globe who create ambitious digital experiences. Network, learn, and be inspired
- Events Discover local events, meet-ups, and training
- Jobs / Careers Find opportunities to work in Drupal
- News & Blogs News and stories about Drupal
- Forum Got a question about Drupal? Find answers on the Drupal forums
- Slack Get support and communicate with the global Drupal community
- Newsletters Sign up for Drupal news and manage your subscriptions
- Drupal Swag Shop Get your Drupal branded merch!
- The Drupal Association Learn how we support Drupal's growth and innovation - and how you can help
- Become a Member Become a Ripplemaker and support the Drupal Association
- Become a Drupal Sustaining Member Supporting the infrastructure the Open Web depends on
- Become a Drupal Certified Partner Join an elite network of agencies committed to Drupal excellence and innovation
- Donate Make a donation to the nonprofit that supports Drupal
- Log in
- Create account
- Try Drupal CMS
- Try hosting

Displaying 1 - 50 of 254

Acquia Content Hub

Acquia Content Hub - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2025-125
Wed, 12/10/2025 - 19:09

Admin Toolbar

Flushing caches inside an update hook is dangerous and can lead to data integrity problems (as well as poor update performance)
Wed, 07/15/2026 - 21:05

AI (Artificial Intelligence)

AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028
Thu, 03/26/2026 - 19:43
AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119
Wed, 12/03/2025 - 19:05

Automated Logout

Automated Logout - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-030
Wed, 03/18/2026 - 16:10

Drupal Canvas

Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017
Wed, 02/25/2026 - 18:51

CAPTCHA

CAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-015
Tue, 03/17/2026 - 13:20

CKEditor 5 Premium Features

CKEditor 5 Premium Features - Moderately critical - Access bypass - SA-CONTRIB-2025-118
Wed, 12/03/2025 - 18:48

Anti-Spam by CleanTalk

Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014
Wed, 02/25/2026 - 18:46

Coding Standards

Allow omitting @var, @param and @return tags or their descriptions if the variable name and type is enough
Tue, 03/03/2026 - 07:27

Config Pages

Config Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-093
Wed, 07/30/2025 - 16:30

Contact

Offering to maintain Contact
Thu, 07/31/2025 - 21:24

Contribution Records

Autofill the commit type from the issue category
Wed, 05/13/2026 - 07:44

Disable Login Page

Disable Login Page - Critical - Access bypass - SA-CONTRIB-2025-124
Wed, 12/03/2025 - 18:49

Drupal core

Add the option to add custom menus to a content type on menu creating/editing
Tue, 07/28/2026 - 18:31
Use a route requirement to prevent non-ASCII characters causing an exception when looking up a config entity
Tue, 07/28/2026 - 09:55
Core security triage 2026-07-09
Fri, 07/24/2026 - 13:20
Don't spellcheck composer.json
Fri, 07/24/2026 - 01:41
Core security triage 2026-07-23
Thu, 07/23/2026 - 22:08
Experimental modules and themes should not have warnings after being installed
Wed, 07/22/2026 - 01:30
Adopt vincentlanglet/twig-cs-fixer for Twig coding standards
Tue, 07/21/2026 - 02:00
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
Wed, 07/15/2026 - 19:52
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011
Wed, 07/15/2026 - 19:51
Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010
Wed, 07/15/2026 - 19:50
Remove some minor constraints from core-recommended
Mon, 07/13/2026 - 15:25
LLM harm reduction in Drupal core contribution, AGENTS.md guidelines
Sun, 07/12/2026 - 18:40
CLI entry point in Drupal Core
Sat, 07/11/2026 - 11:05
Core security triage 2026-06-11
Fri, 07/10/2026 - 15:20
The installer should download translations for the current install profile
Tue, 07/07/2026 - 06:47
[policy, no patch] Remove Telephone module from core
Wed, 07/01/2026 - 06:40
[meta] Tasks to deprecate Stable 9
Wed, 07/01/2026 - 05:10
[policy, no patch] Deprecate Olivero and move to contrib
Fri, 06/26/2026 - 10:05
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003
Mon, 06/22/2026 - 15:06
Core security triage 2026-06-04
Thu, 06/18/2026 - 22:10
Drupal core - Critical - PHP object injection - SA-CORE-2026-005
Thu, 06/18/2026 - 00:37
Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009
Wed, 06/17/2026 - 18:58
Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008
Wed, 06/17/2026 - 18:57
Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007
Wed, 06/17/2026 - 18:57
Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006
Wed, 06/17/2026 - 18:57
Add tests for SA-CORE-2021-002
Wed, 06/17/2026 - 09:15
Set memory limit for `composer phpcs` command
Mon, 06/15/2026 - 08:40
[random test failure] ComposerRequirementTest::testComposerInfoShown
Mon, 06/15/2026 - 08:35
HTML5 validation is preventing form submit and not fully accessible
Sun, 06/14/2026 - 14:15
Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
Fri, 06/12/2026 - 13:37
Update main and 11.x to latest Twig and Symfony versions
Thu, 06/04/2026 - 08:05
Update Composer to 2.9.8
Wed, 06/03/2026 - 21:50
[backport] Update underscore.js to 1.13.8
Wed, 06/03/2026 - 21:50
Private file download returns access denied, when file attached to revision other than current
Tue, 06/02/2026 - 21:45
[policy, no patch] Update the BC policy to explain that dependencies may include breaking changes we cannot control
Wed, 05/27/2026 - 05:00
Use symfony/runtime for less bespoke bootstrap/compatibility with varied runtime environments
Wed, 05/27/2026 - 03:20