Closed Ambient-Impact closed 1 year ago
This was published yesterday: https://www.drupal.org/sa-contrib-2023-030
The 1.x branch has the security fix, but the 2.x branch, being in alpha does not have the fix yet is still vulnerable. There's an ongoing issue about 2.x, and the vibe there is that 2.x may be postponed for now and Drupal 10 support is likely to be added to the 1.x branch instead.
This was published yesterday: https://www.drupal.org/sa-contrib-2023-030
The 1.x branch has the security fix, but the 2.x branch, being in alpha does not have the fix yet is still vulnerable. There's an ongoing issue about 2.x, and the vibe there is that 2.x may be postponed for now and Drupal 10 support is likely to be added to the 1.x branch instead.