Tag
drupal
Safeguard articles tagged "drupal" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Application Security
A hardening checklist for modern Drupal deployments
Drupal 7's 2025 end-of-life left unsupported sites exposed; here's a concrete checklist for module vetting, access control, and patch cadence on Drupal 10/11.
Jul 11, 20266 min read
Vulnerability Analysis
Drupalgeddon2 (CVE-2018-7600) Explained: Drupal's Form API RCE
CVE-2018-7600, known as Drupalgeddon2, is a CVSS 9.8 unauthenticated remote code execution flaw in Drupal core's Form API. Here is how the renderable-array bug works and which versions to run.
Jul 3, 20266 min read