Drupal security advisory (AV25-847)

Serial number: AV25-847
Date: December 17, 2025

On December 17, 2025, Drupal published a security advisory to address a vulnerability in the following product:

• HTTP Client Manager – version 9.3.13
• HTTP Client Manager – versions 10.0.x prior to 10.0.2
• HTTP Client Manager – version 11.0.x prior to 11.0.1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

• HTTP Client Manager - Less critical - Information disclosure - SA-CONTRIB-2025-126
• Drupal Security Advisories