Drupal security advisory (AV25-617)

Serial number: AV25-617
Date: September 24, 2025

On September 24, 2025, Drupal published security advisories to address vulnerabilities in the following products:

  • JSON Field – versions prior to 1.5
  • Plausible tracking – versions prior to 1.0.2
  • Access code – versions prior to 2.0.5
  • Umami Analytics – version prior to 1.0.1
  • Currency – versions prior to 3.5.0
  • Reverse Proxy Header – version prior to 1.1.2

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates or perform the suggested mitigations.

Date modified: