Greg Knaddison (greggles)

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060

Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061

SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031

AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057

Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007

Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006

Drupal core - Critical - PHP object injection - SA-CORE-2026-005

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055

Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009