securitydrupalorg

Issues

• 📌

  Unsuported Modules: Establish timeline for publishing of vulnerability info to allow for possible CVE creation

  Active

  Documentation

  Created about 9 hours ago

  v1.0
  🇺🇸United States cmlara

  about 9 hours ago
• 🐛

  "My security issues" block's "more" link is redirecting to the wrong url

  Active

  Code

  Created 3 days ago

  v1.0
  🇧🇪Belgium BramDriesen

  2 days ago
• 📌

  Update CNA scope

  Needs review

  Code

  Created about 2 months ago

  v1.0
  🇺🇸United States greggles

  2 days ago
• 📌

  Create CVEs for

  Active

  Code

  Created about 2 months ago

  v1.0
  🇺🇸United States greggles

  3 days ago
• 📌

  Create CVEs for contributed projects in 2024

  Active

  Code

  Created 17 days ago

  v1.0
  🇺🇸United States greggles

  4 days ago
• 📌

  Create a cve for diff

  Active

  Code

  Created 3 months ago

  v1.0
  🇺🇸United States greggles

  11 days ago
• 📌

  Create CVEs for SA-CORE-2024-003, 004, 005, 006, 007, 008

  Active

  Code

  Created 17 days ago

  v1.0
  🇺🇸United States greggles

  12 days ago
• 📌

  Develop and publish policy regarding missed SA notices

  Active

  Security Working Group (policy questions)

  Created over 2 years ago

  v1.0
  🇺🇸United States cmlara

  12 days ago
• 📌

  Improve Security Risk Levels Defined docs page

  Active

  Documentation

  Created over 1 year ago

  v1.0
  🇺🇸United States DamienMcKenna

  12 days ago
• 🐛

  Update 'Security team process' link in Quicklinks to point to d.o

  Fixed

  Code

  Created over 8 years ago

  v1.0
  🇺🇸United States cashwilliams

  12 days ago
• ✨

  Security Tracker Emails: Strip the Body Field Or Encrypt with Recipient's Pubic GPG Key

  Closed: won't fix

  Code

  Created about 10 years ago

  v1.0
  🇺🇸United States rickmanelius

  12 days ago
• 📌

  Collect CVE related details as part of Security Issue

  Active

  Code

  Created 2 months ago

  v1.0
  🇺🇸United States cmlara

  15 days ago
• 💬

  greggles dealing with organization credit attribution limitations

  Postponed

  Miscellaneous

  Created 7 months ago

  v1.0
  🇺🇸United States greggles

  24 days ago
• 🌱

  More flexible language for git vetted status for co-maintainers of existing projects

  Active

  Code

  Created almost 2 years ago

  v1.0
  🇬🇧United Kingdom catch

  about 1 month ago
• ✨

  Prohibit the ability to adopt a project

  Active

  Code

  Created 7 months ago

  v1.0
  🇺🇸United States cmlara

  2 months ago
• 📌

  Automate publishing of CVE's

  Active

  Code

  Created 2 months ago

  v1.0
  🇺🇸United States cmlara

  2 months ago
• 💬

  Publication of CVE-2024-45440 by MITRE

  Active

  Security Working Group (policy questions)

  Created 4 months ago

  v1.0
  🇺🇸United States cmlara

  4 months ago
• ✨

  Update policy to explicitly state security issues will be handled privately

  Active

  Security Working Group (policy questions)

  Created over 2 years ago

  v1.0
  🇺🇸United States DamienMcKenna

  4 months ago
• 🐛

  Drupal SA's missing CVE ID's

  Active

  Documentation

  Created 4 months ago

  v1.0
  🇺🇸United States cmlara

  4 months ago
• 📌

  Expand the ability of module maintainers to mark a particular release as security.

  Active

  Code

  Created 6 months ago

  v1.0
  🇺🇸United States nicxvan

  6 months ago
• ✨

  Require in-person identity confirmation to receive security opt-in role.

  Active

  Code

  Created 7 months ago

  v1.0
  🇺🇸United States cmlara

  7 months ago
• 🌱

  [META] Increase Security of Project Ownership Transfer Process

  Active

  Code

  Created 7 months ago

  v1.0
  🇺🇸United States cmlara

  7 months ago
• 📌

  Remove riskcalc, replaced with www.drupal.org

  Fixed

  Code

  Created 8 months ago

  v1.0
  🇺🇸United States drumm

  8 months ago
• 📌

  Switch to CVSS scoring

  Active

  Code

  Created 8 months ago

  v1.0
  cilefen

  8 months ago
• 📌

  Document the process for updating an "unsupported" SA due to new adoption

  Active

  Documentation

  Created over 1 year ago

  v1.0
  🇺🇸United States DamienMcKenna

  9 months ago
• 📌

  Review and fix up message templates

  Fixed

  Documentation

  Created 10 months ago

  v1.0
  🇺🇸United States greggles

  9 months ago
• 📌

  Get an Open Source Security Foundation badge for Drupal (core? contrib?)

  Needs review

  Miscellaneous

  Created almost 3 years ago

  v1.0
  🇺🇸United States greggles

  10 months ago
• 🐛

  Link to create SA in the sidebar info section doesn't work

  Fixed

  Code

  Created about 1 year ago

  v1.0
  🇧🇪Belgium kristiaanvandeneynde

  10 months ago
• 📌

  Update links on the with wrong counts

  Active

  Documentation

  Created about 1 year ago

  v1.0
  🇧🇪Belgium BramDriesen

  about 1 year ago
• ✨

  Change SA opt-in to differentiate between "not opted in (yet)" vs "opted out"

  Active

  User interface

  Created about 1 year ago

  v1.0
  🇺🇸United States DamienMcKenna

  about 1 year ago
• 📌

  Update security issue version field for semantic versioning & Drupal 9

  Active

  User interface

  Created about 4 years ago

  v1.0
  🇺🇸United States drumm

  about 1 year ago
• 📌

  Create new documentation guide & pages that clearly documents what issues are not considered security issues

  Active

  Miscellaneous

  Created almost 3 years ago

  v1.0
  🇺🇸United States DamienMcKenna

  over 1 year ago
• ✨

  Adjust order for editing SA fields to match s.d.o and the display on d.o

  Fixed

  sahtml

  Created almost 6 years ago

  v1.0
  🇺🇸United States greggles

  over 1 year ago