Drupal security advisory (AV26-518)

Serial number: AV26-518
Date: May 28, 2026

On May 27, 2026, Drupal published a security advisory to address a critical vulnerability in the following product:

  • Drupal AlternativeCommerce (Basket) – versions prior to 2.1.17

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

Date modified: