Advisories in Five Months: Results from the Drupal AI Security Initiative
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Drupal published 256 security advisories between June and October 2026, more than the 250 published over the previous 30 months combined. The Drupal Association attributes the surge to cheaper, AI-assisted vulnerability discovery rather than to changes in Drupal's codebase.