https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:13:17.949107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-6365 CVE-2026-6365 — Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001 2026-10-02T21:13:17.950729+00:00

Affected: Drupal core

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Cross-Site Scripting (XSS).

This issue affects Drupal core: from 8.0.0 before 10.5.9, from 10.6.0 before 10.6.7, from 11.0.0 before 11.2.11, from 11.3.0 before 11.3.7.