Greg Knaddison (greggles)

Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006

Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007

Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008

Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009

ECA: Event - Condition - Action - Less critical - Information disclosure - SA-CONTRIB-2026-074

Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072

Siteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-073

UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-075

Plotly.js Graphing - Critical - PHP object injection - SA-CONTRIB-2026-050

Examples for Developers - Moderately critical - Access bypass - SA-CONTRIB-2026-044