Project: Drupal coreProject machine name: drupalDate: 2026-October-14Security risk: Critical 19 ∕ 25 AC:Basic/A:None/CI:All/II:All/E:Theoretical/TD:DefaultVulnerability: Remote code executionAffected versions: >= 8.…

Security advisories: Drupal core - Critical - Remote code execution - SA-CORE-2026-014

• 19 || >= 11.
• 10 || >= 12.

RSS 官方收录 · 可信分层展示

Project: Drupal coreProject machine name: drupalDate: 2026-October-14Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Proof/TD:UncommonVulnerability: Cross-site scriptingAffected versions: >= 8.…

Security advisories: Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015

• 19 || >= 11.
• 10 || >= 12.

RSS 官方收录 · 可信分层展示

Project: Drupal coreProject machine name: drupalDate: 2026-October-14Security risk: Moderately critical 12 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:UncommonVulnerability: Cross-site scriptingAffected versions: >= 10.…

Security advisories: Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016

• 19 || >= 11.
• 10 || >= 12.

RSS 官方收录 · 可信分层展示

Drupal 11.4.9 addresses a shifting navigation sidebar, updates CKEditor 5, and makes editor toolbar configuration more flexible through recipes.…

Dynamosys Insights: Drupal 11.4.9: A Steadier Sidebar and Better CKEditor Setup

• Here’s what the release means for content teams, developers, and site …

RSS 官方收录 · 可信分层展示

A council-developed publishing platform has completed an international standards review. Two initially unmet requirements reveal what the assessment demanded. Planet

The Drop Times: LocalGov Drupal Recognised as a Digital Public Good

RSS 官方收录 · 可信分层展示

We read all 462 case studies on drupal.org and coded every migration that says how long it took.…

Gspikes: Website Migration Timeline: How Long 29 Real Drupal Migrations Took

• 5 months from kickoff to launch.
• Small relaunches took weeks; multi-site platforms took a year or more.

RSS 官方收录 · 可信分层展示

Extending Editoria11y with Custom Content Checks in Drupal Joel Steidl Tue, 10/13/2026 - 14:53 Drupal An editor copies a link from an email, adds it to a page, and publishes.…

Aten Design Group: Extending Editoria11y with Custom Content Checks in Drupal

• The link text looks right.
• The destination opens.

RSS 官方收录 · 可信分层展示

Released Translation Template Extractor 3, a tool for the modern Drupal age If you ever translated Drupal software, you used the Translation Template Extractor (potx) at least indirectly, even if you never heard of it.…

Gábor Hojtsy: Released Translation Template Extractor 3, a tool for the modern Drupal age

• It reads the source code of Drupal core and contributed projects, and …
• Every string translated on localize.

RSS 官方收录 · 可信分层展示

Drupal Meets Matrix 03 - Better Conversations with Advanced Comment Threads John Locke Tue, 10/13/2026 - 10:00 Commenting in Drupal hasn't noticeably changed in 15 years.…

Freelock Blog: Drupal Meets Matrix 03 - Better Conversations with Advanced Comment Threads

• That changes now.

RSS 官方收录 · 可信分层展示

In March 2012 a developer asked us for a PHP version per platform, a per-site override on top, and a way to tell Drush which PHP to use, and I turned the Provision half down myself, because the Ægir backend's command-line PHP was hard-wired into the Drush wrapper and had to be running before any task could change it.…

Omega8.cc: One Garage, Many Engines

• Fourteen years and a few small text files later, BOA-5.
• 866 closes that gap: one line in cli-per-platform.

RSS 官方收录 · 可信分层展示

I’m always blown away by the Driesnote slides I’ve watched a lot of Driesnotes.A lot.Goodness me, I don’t even know how many.…

rachel_norfolk: I’m always blown away by the Driesnote slides

• Over the last few years, and I promise to find out exactly how many, D…
• (yes, absolutely go give the shout outs!

RSS 官方收录 · 可信分层展示

Need better image galleries in Drupal? The Media Scroller module adds a large main image, synced thumbnail navigation, and simple configuration without custom templates.

Specbee: Need better image galleries in Drupal? The Media Scroller module adds a large main image, synced thumbnail navigation, and simple configuration without custom templates.

RSS 官方收录 · 可信分层展示

A Drupal update should come with confidence that your important workflows still work. Learn how to introduce Playwright, build useful browser tests, and make automation part of your release process.

Dynamosys Insights: Playwright for Drupal: A Practical Guide to Test Automation

RSS 官方收录 · 可信分层展示

The eight-step Drupal 7 database cleanup we run before every migration: caches and logs, revisions, deleted fields, files, spam accounts, content you will not bring, and the module data you leave behind, in the order that costs least and saves most.

Gspikes: Cleaning a Decade of Drupal Database Cruft Before You Migrate

RSS 官方收录 · 可信分层展示

Date: 2026-October-12Security risk: Critical 19 ∕ 25 AC:Complex/A:None/CI:All/II:All/E:Theoretical/TD:AllDescription: There will be a Drupal core security release for all supported branches on October 14, 2026 between 16:00 and 21:00 UTC.…

Security public service announcements: Upcoming critical Drupal core release on October 14, 2026 - PSA-2026-10-12

• (To see this in your local timezone, refer to the Drupal Core Calendar.
• ) Based on our analysis this vulnerability rates at 19/25 on our risk …

RSS 官方收录 · 可信分层展示

Most Drupal site owners I talk to handle Drupal security updates the same way.These are the fixes the Drupal Security Team publishes for core and contributed modules.…

Droptica: Drupal security updates in the AI era: why “we’ll patch next sprint” no longer works

• A developer sees the security advisory.
• A ticket goes into the next sprint.

RSS 官方收录 · 可信分层展示

Shared code creates shared security needs. European product rules raise a more specific question: who must act? Planet

The Drop Times: EU Cyber Resilience Act: What Drupal Suppliers Must Assess

RSS 官方收录 · 可信分层展示

Running with scissors: Using AI to explore, build, maintain, contribute, and secure Drupal" is the title of my DrupalCon Orlando session proposal.…

Jacob Rockowitz: Running with scissors: Using AI to explore, build, maintain, contribute, and secure Drupal

• I've been using and writing about AI as a Drupal developer for the pas…
• There is so much discussion about AI and Drupal, and I'd like your hel…

RSS 官方收录 · 可信分层展示

Author: Will Huggins The narrative around enterprise AI is changing.…

Drupal AI Initiative: Leading the Open AI Conversation: Drupal at Digital Leaders' AI Week 2026

• Digital leaders — from CMOs looking for campaign velocity to CISOs man…
• They are asking for AI infrastructure they can actually trust.

RSS 官方收录 · 可信分层展示

Questions about the pace of advanced artificial intelligence are no longer confined to the research teams building it.…

The Drop Times: Who Has the Authority to Slow AI Down?

• Former OpenAI safety leader David Robinson described his decision to l…
• Former Anthropic researcher Jacob Coxon had raised concerns about comp…

RSS 官方收录 · 可信分层展示

Importing content with the Default Content module is really useful when populating a site with content.…

#! code: Drupal 11: Don't Create Node During Content Import

• There's an increasing number of recipes and modules that can be used t…
• Default content is really useful when figuring out how a system works …

RSS 官方收录 · 可信分层展示

Drupal's Form API comes with built-in tooling to allow any form element to initiate a submission.…

Drupal Patterns: From Architecture to Innovation: Interactive Forms with htmx 4

• When combined the support for returning HTML fragments in htmx 4, it's…

RSS 官方收录 · 可信分层展示

Read moreOpening DrupalCon, a summitDrupalCon Rotterdam: building Drupal’s AI future togetherdrupalSaturday, October 10, 2026 - 19:41

Dominique De Cooman: DrupalCon Rotterdam: building Drupal’s AI future together

RSS 官方收录 · 可信分层展示

Drupal Meets Matrix part 2: Live Comments with ECA and HTMX John Locke Sat, 10/10/2026 - 12:00 A comment thread in Drupal works totally fine.…

Freelock Blog: Drupal Meets Matrix part 2: Live Comments with ECA and HTMX

• You fill in a form, click submit, and your comment gets posted.
• Same way it has for over 20 years.

RSS 官方收录 · 可信分层展示

A customer submits a web enquiry.Someone reads it, copies the details into the CRM and asks for missing information.…

Webpro Company blog: AI enquiry processing: from Drupal to your CRM

• When that happens every day, enquiry preparation is a useful place to …
• Choose one task with a clear finish line AI business process automatio…

RSS 官方收录 · 可信分层展示

Can it be all so simple?Migrating a 13-year-old WordPress blog to Drupal CMS Image Can it be all so simple?…

Penyaskito: Can it be all so simple? Migrating a 13-year-old WordPress blog to Drupal CMS

• Spoiler: no, it can't.
• But it was fun.

RSS 官方收录 · 可信分层展示

Drupal is changing how developers organize some of the code behind your website. Here’s what the transition means for custom functionality, theme maintenance, and planning your next upgrade.

Dynamosys Insights: Drupal Is Retiring .module Files. What Should Website Owners Do?

RSS 官方收录 · 可信分层展示

Pierre Rudloff, Joseph Zhao, Bram Driesen and Swan Kalata have moved from provisional to full membership of the Drupal Security Team.…

The Drop Times: Drupal Security Team Confirms Four Full-Member Promotions

• Their public records show experience in vulnerability reporting, fixes…

RSS 官方收录 · 可信分层展示

During the lifecycle of a Drupal site, content changes and the site evolves, requiring content maintenance.…

Metadrop: How to fix Drupal redirect chains automatically with Redirect Audit

• One of the issues that can happen is redirect chains.
• Why Drupal sites accumulate hundreds of redirect chains A Drupal site …

RSS 官方收录 · 可信分层展示

Henadzi Koltun argues that Drupal’s value lies in durable engineering rather than short-term gains.…

The Drop Times: “Drupal Isn’t About Quick Wins”: Henadzi Koltun on Sustainable Growth

• He discusses when headless architecture is justified, why AI still nee…

RSS 官方收录 · 可信分层展示