Upcoming highly critical release on May 20, 2026 - PSA-2026-05-18

i’m probably the only one here using drupal, but this seems to be an important security update. i guess it’s discovered by one of these AI-tools, claude or whatever the name may be. they’re good at finding security flaws in software and when it’s “white-head” hackers, they publish them responsibly…

the update applied fine, no problems encountered. the security risk affected only drupal sites using postgreSQL, as has been disclosed now. so we wouldn’t be at risk anyway. but it’s good to be on the latest patch.