{"id":"drupal-security-3e90a9fe9fc3","seq":2040,"kind":"advisory","title":"Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2022-016","url":"https://www.drupal.org/sa-core-2022-016","permalink":"https://vulnpulse.app/items/drupal-security-3e90a9fe9fc3","summary":"Project: Drupal core Project machine name: drupal Date: 2022-September-28 Security risk: Critical 18 ∕ 25 AC:Basic/A:Admin/CI:All/II:All/E:Proof/TD:All Vulnerability: Multiple vulnerabilities Affected versions: >= 8.0.0 <9.3.22 || >= 9.4.0 <9.4.7 CVE IDs: CVE-2022-39261 Description: Drupal uses the Twig third-party library for content templating and sanitization. Twig has released a security update that affects Drupal. Twig has rated the vulnerability as high severity. Drupal core's code extending Twig has also been updated to mitigate a related vulnerability. Multiple vulnerabilities are pos…","severity":"critical","techs":["drupal","php"],"cves":["CVE-2022-39261"],"tags":["security"],"source":{"id":"drupal-security","name":"Drupal Security Advisories"},"published_at":"2022-09-28T16:24:08.000Z","fetched_at":"2026-10-21T16:17:45.699Z"}