BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Drupal

Drupal Security Releases - November 2025

drupal-2025-11 Nov 1, 2025 Source: Vendor

Drupal security advisories for November 2025: 4 CVEs, 26 credited researchers.

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

47 lines
All 47 CVEs 47 Additional recognition 0 Unclaimed only
Showing 1–47 of 47
CVE-2025-13080 BR2025-0000-028526 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Dragos Dumitrescu (dragos-dumi)
CVE-2025-13080 BR2025-0000-028527 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as yasser ALLAM (inzo_)
CVE-2025-13080 BR2025-0000-028528 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Nils Destoop (nils.destoop)
CVE-2025-13080 BR2025-0000-028529 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Sven Decabooter (svendecabooter)
CVE-2025-13080 BR2025-0000-028530 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as zhero
CVE-2025-13080 BR2025-0000-028531 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Alex Pott (alexpott) of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028532 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as catch (catch) of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028533 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as cilefen (cilefen) of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028534 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Jen Lampton (jenlampton), provisional member of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028535 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028536 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Dave Long (longwave) of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028537 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Drew Webber (mcdruid) of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028538 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Juraj Nemec (poker10) of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028539 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Ra Mänd (ram4nd), provisional member of the Drupal Security Team
CVE-2025-13080 BR2025-0000-028540 unclaimed
Drupal core - Moderately critical - Denial of Service - SA-CORE-2025-005
Credited as Jess (xjm) of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028541 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as anzuukino
CVE-2025-13081 BR2025-0000-028542 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Anna Kalata (akalata), provisional member of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028543 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as catch (catch) of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028544 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Neil Drumm (drumm) of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028545 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Greg Knaddison (greggles) of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028546 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028547 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Dave Long (longwave) of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028548 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Drew Webber (mcdruid) of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028549 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Juraj Nemec (poker10) of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028550 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Ra Mänd (ram4nd), provisional member of the Drupal Security Team
CVE-2025-13081 BR2025-0000-028551 unclaimed
Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006
Credited as Jess (xjm) of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028552 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Kevin Quillen (kevinquillen)
CVE-2025-13082 BR2025-0000-028553 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Benji Fisher (benjifisher) of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028554 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Neil Drumm (drumm) of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028555 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Greg Knaddison (greggles) of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028556 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028557 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Drew Webber (mcdruid) of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028558 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Mingsong (mingsong), provisional member of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028559 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Juraj Nemec (poker10) of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028560 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Ra Mänd (ram4nd), provisional member of the Drupal Security Team
CVE-2025-13082 BR2025-0000-028561 unclaimed
Drupal core - Moderately critical - Defacement - SA-CORE-2025-007
Credited as Jess (xjm) of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028562 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as Damien McKenna (damienmckenna) of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028563 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as tame4tex
CVE-2025-13083 BR2025-0000-028564 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as Benji Fisher (benjifisher) of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028565 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as catch (catch) of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028566 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as Neil Drumm (drumm) of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028567 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as Lee Rowlands (larowlan) of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028568 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as Mingsong (mingsong), provisional member of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028569 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as Mohit Aghera (mohit_aghera)
CVE-2025-13083 BR2025-0000-028570 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as James Gilliland (neclimdul) of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028571 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as Juraj Nemec (poker10) of the Drupal Security Team
CVE-2025-13083 BR2025-0000-028572 unclaimed
Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008
Credited as Jess (xjm) of the Drupal Security Team