Security support for Drupal core minor versions reduced to 8 months
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Drupal is cutting security coverage for each minor release of its core from 12 months to 8 months starting in 2027, citing a surge in AI-driven vulnerability reports that strains the Drupal Security Team's limited funding.