Drupal security advisory (AV26-615)

Serial number: AV26-615
Date: June 18, 2026

On June 17, 2026, Drupal published security advisories to address vulnerabilities in a number of products. Included were critical updates for the following:

  • Drupal core – multiple versions
  • Plotly.js Graphing – versions prior to 3.0.2
  • Flag attendance field – versions prior to 8.x-1.2
  • Formatter Field – versions prior to 2.0.0

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates or perform the suggested mitigations.

Date modified: