|
Drupal.org security advisory coverage applications |
[1.0.x] FastComments Live Commenting |
Needs review |
Minor |
Task |
|
|
7 months 1 week |
|
S3 File System |
Always generate CDN URLs for image styles, including itok |
Active |
Normal |
Feature request |
5.x-dev |
|
1 day 14 hours |
|
Content Credentials |
README and CHANGELOG: C2PA Sign 1.5.0 keeps a C2PA 2.x file's origin |
Active |
Normal |
Task |
1.0.x-dev |
|
15 min 45 sec |
|
Acquia DAM |
SiteStudioIntegrationTest doesn't run on gitlab CI but is running locally |
Active |
Normal |
Task |
1.1.x-dev |
|
1 year 11 months |
|
Drupal core |
Preview link click protection is not correctly scoped |
Needs review |
Normal |
Bug report |
main |
|
3 years 1 week |
|
Drupal core |
Update lockfile versions of Symfony components, Guzzle, Composer |
Fixed |
Normal |
Task |
10.6.x-dev |
|
3 hours 43 min |
|
Drupal core |
Delete access for new entities should be forbidden early |
Needs review |
Minor |
Bug report |
main |
kristiaanvandeneynde |
10 years 6 months |
|
UI Suite Bootstrap |
Add empty props to components that have no props |
Postponed (maintainer needs more info) |
Normal |
Task |
5.2.x-dev |
|
1 week 8 hours |
|
Drupal core |
Add requirement error if Apache does not have mod_rewrite enabled |
Postponed |
Normal |
Bug report |
main |
|
3 years 4 months |
|
Drupal core |
Fix missing autowiring for EntityViewDisplayOverviewController |
Active |
Normal |
Bug report |
11.4.x-dev |
|
1 day 22 hours |
|
Drupal core |
Do not use a CSS-only required marker in forms per WCAG 2.0 |
Needs work |
Major |
Bug report |
main |
kentr |
8 years 11 months |
|
Drupal core |
Random test failures on ThemeSettingsFormTest::testFormSettingsSubmissionHandler |
Needs work |
Minor |
Bug report |
main |
matthand |
3 weeks 5 hours |
|
External Links |
Make sure aria-label is used correctly throughout |
Needs review |
Normal |
Bug report |
2.0.4 |
|
1 year 10 months |
|
Commerce Authorize.Net |
Accessibility: Improve label association and add alt text to credit card icons |
Needs review |
Normal |
Bug report |
2.x-dev |
|
9 months 2 weeks |
|
Drupal core |
Move Drupal Core API Docs into Doctum or other SSG |
Active |
Normal |
Task |
main |
abenbow |
1 week 1 day |
|
Redirect |
Redirect admin shows wrong language prefix in URL display |
Needs work |
Normal |
Bug report |
8.x-1.x-dev |
|
1 year 2 months |
|
Drupal core |
[meeting] CLI in Core Initiative Meeting 2026.10.07 |
Fixed |
Normal |
Task |
main |
|
1 day 16 hours |
|
Drupal core |
[meeting] CLI in Core Initiative Meeting 2026.10.14 |
Fixed |
Normal |
Task |
main |
|
1 day 16 hours |
|
Drupal core |
Add scope attributes to table render element header cells for WCAG 1.3.1 compliance |
Needs work |
Normal |
Bug report |
main |
|
9 months 2 weeks |
|
Drupal Security Team |
Policy: Change advisory release window day to Tuesday |
Needs review |
Normal |
Plan |
7.x-1.x-dev |
|
2 weeks 5 days |
|
Drupal core |
[meeting] CLI in Core Initiative Meeting 2026.09.23 |
Fixed |
Normal |
Task |
main |
|
1 day 17 hours |
|
Drupal core |
search_update_11401() fails with undefined HelpSearch::updateTopicList() when help or node has a module weight above 0 |
Needs work |
Normal |
Bug report |
11.x-dev |
|
1 day 5 hours |
|
Translation Management Tool |
Same as source default moderation states option doesn't work |
Active |
Normal |
Bug report |
8.x-1.x-dev |
achap |
3 hours 39 min |
|
Orange DAM |
Drush 13 compatibility |
Fixed |
Normal |
Task |
2.2.0 |
apotek |
1 year 9 months |
|
Drupal core |
Language switcher block is an unlabelled navigation landmark region |
Needs review |
Normal |
Bug report |
main |
|
7 years 6 months |
|
View profiles permissions |
Drupal 11 readiness |
Active |
Normal |
Support request |
2.1.1 |
|
1 year 2 months |
|
Views exposed form layout |
Unable to change layout |
Active |
Normal |
Bug report |
8.x-3.2 |
|
4 hours 18 min |
|
Commerce Authorize.Net |
Better handling for errors from Authorize.net, e.g. "E00027: The transaction was unsuccessful." |
Active |
Normal |
Bug report |
2.x-dev |
|
2 years 8 months |
|
Recurring Events |
Recurrence changes saved as draft do not regenerate event instances |
Needs review |
Normal |
Bug report |
3.0.x-dev |
|
7 hours 1 min |
|
Megamenu SDC |
Normalize menu content before returning it as a component slot |
Active |
Normal |
Bug report |
1.0.x-dev |
|
5 hours 10 min |
|
Key |
Drupal 12 support - Will it be 2.x only, or 1.x as well? |
Fixed |
Major |
Support request |
8.x-1.x-dev |
|
1 month 2 weeks |
|
User email verification |
PHP 8.4 Deprecation |
Reviewed & tested by the community |
Normal |
Bug report |
8.x-1.x-dev |
|
5 months 3 weeks |
|
Custom Field |
Add core's `js-text-full text-full` classes to the textarea widget |
Active |
Normal |
Feature request |
4.0.x-dev |
|
5 hours 31 min |
|
Barrio Bootstrap 5 Theme |
Breadcrumbs break after upgrading 5.5.20 to 5.5.21 and 22 |
Active |
Normal |
Bug report |
5.5.22 |
|
5 hours 56 min |
|
Translation Management Tool |
Deprecate procedural code |
Needs review |
Normal |
Task |
8.x-1.x-dev |
|
1 day 12 hours |
|
Group views join link |
Automated Drupal 12 compatibility fixes for group_join_link 3.0.x-dev |
Fixed |
Normal |
Task |
3.0.x-dev |
|
3 months 3 weeks |
|
Group Block |
Automated Drupal 12 compatibility fixes for groupblock 3.x-dev |
Fixed |
Normal |
Task |
3.x-dev |
|
4 months 6 days |
|
Gutenberg |
Content block usage tracking is not revision-aware and can delete blocks still used |
Needs review |
Major |
Bug report |
3.0.x-dev |
szeidler |
1 month 1 week |
|
Redirect |
Already encoded URLs are double-encoded, creating broken redirects |
Reviewed & tested by the community |
Major |
Bug report |
8.x-1.x-dev |
|
5 years 8 months |
|
Yoyaku Booking Engine |
The booking form handler no longer loads since Orchestra passes the resumed token to onResumed(), and copies a branch's answers onto the instance's order |
Needs review |
Major |
Bug report |
1.x-dev |
|
7 hours 30 min |
|
Orchestra Workflow Engine |
Pass the resumed token to a webform interaction handler's onResumed() |
Fixed |
Normal |
Task |
1.x-dev |
|
12 hours 33 min |
|
Yoyaku Booking Engine |
A partially used order can be canceled and purged, lock counters use MySQL-only SQL, and four more defects in the engine and its screens |
Needs review |
Normal |
Bug report |
1.x-dev |
|
14 hours 42 min |
|
Yoyaku Booking Engine |
A tariff label can run script in bookers' browsers, a resource manager can cancel confirmed bookings without the cancel permission, and one request can ask for unbounded quantities |
Fixed |
Major |
Bug report |
1.x-dev |
|
14 hours 43 min |
|
Wordcloud |
Automated Drupal 11/12 compatibility fixes for wordcloud |
Needs review |
Normal |
Task |
1.0.0-alpha2 |
|
2 years 6 months |
|
Drupal core |
Add custom grid wrapper and grid cell classes to the Responsive Grid views format |
Reviewed & tested by the community |
Normal |
Feature request |
main |
|
8 months 1 week |
|
Display Builder |
Selecting a container rebuilds the configuration form of every descendant component |
Fixed |
Critical |
Bug report |
1.0.x-dev |
|
4 days 21 hours |
|
Orchestra Workflow Engine |
Load the actions list in batches, name five methods with verbs, fold duplicated helpers, fix stale comments and name each Withdraw button |
Fixed |
Normal |
Task |
1.x-dev |
|
14 hours 43 min |
|
Drupal.org security advisory coverage applications |
[1.0.x] Botshield |
Needs review |
Major |
Task |
|
|
7 months 2 weeks |
|
Yoyaku Booking Engine |
Booking steps in a subprocess silently do nothing, a subprocess given the order's id takes the order over, and an emptied booking form field keeps its old value |
Fixed |
Major |
Bug report |
1.x-dev |
|
15 hours 5 min |
|
DrupalCamp Colorado |
2027 Camp Planning: 10/20/2026 |
Active |
Normal |
Plan |
8.x-3.x-dev |
ccoughlan |
9 hours 12 min |