Drupal Releases Security Update 

Cybersecurity and Infrastructure Security Agency (CISA) - Defend Today, Secure Tomorrow

You are subscribed to Cybersecurity Advisories for Cybersecurity and Infrastructure Security Agency. This information has recently been updated, and is now available.

07/21/2022 12:48 PM EDT

Original release date: July 21, 2022

Drupal has released security updates to address vulnerabilities affecting Drupal 9.3 and 9.4. An attacker could exploit some of these vulnerabilities to take control of an affected system.  

CISA encourages users and administrators to review Drupal security advisory SA-CORE-2022-015 and apply the necessary update.  

This product is provided subject to this Notification and this Privacy & Use policy.