Drupal
729 CVEs across 104 months on the top 200 list since Mar 2005. Peak rank #4 in Jul 2008. 4 of them are now in CISA KEV.
Drupal CVEs per month since Mar 2005
Oct 2021: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #145 · mostly DrupalNov 2021: 2 CVEs · 0 critical · 0 now in CISA KEV · rank #195 · mostly DrupalDec 2021: not on the top 200 that monthJan 2022: not on the top 200 that monthFeb 2022: 11 CVEs · 1 critical · 0 now in CISA KEV · rank #61 · mostly Core, Drupal, Entity EmbedMar 2022: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #185 · mostly DrupalApr 2022: not on the top 200 that monthMay 2022: not on the top 200 that monthJun 2022: 3 CVEs · 1 critical · 0 now in CISA KEV · rank #191 · mostly Drupal, Saml Sp 2.0 Single Sign OnJul 2022: not on the top 200 that monthAug 2022: not on the top 200 that monthSep 2022: not on the top 200 that monthOct 2022: not on the top 200 that monthNov 2022: not on the top 200 that monthDec 2022: not on the top 200 that monthJan 2023: not on the top 200 that monthFeb 2023: not on the top 200 that monthMar 2023: not on the top 200 that monthApr 2023: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #93 · mostly Core, DrupalMay 2023: not on the top 200 that monthJun 2023: not on the top 200 that monthJul 2023: not on the top 200 that monthAug 2023: not on the top 200 that monthSep 2023: not on the top 200 that monthOct 2023: not on the top 200 that monthNov 2023: not on the top 200 that monthDec 2023: not on the top 200 that monthJan 2024: not on the top 200 that monthFeb 2024: not on the top 200 that monthMar 2024: not on the top 200 that monthApr 2024: not on the top 200 that monthMay 2024: not on the top 200 that monthJun 2024: not on the top 200 that monthJul 2024: not on the top 200 that monthAug 2024: not on the top 200 that monthSep 2024: not on the top 200 that monthOct 2024: not on the top 200 that monthNov 2024: not on the top 200 that monthDec 2024: 8 CVEs · 3 critical · 0 now in CISA KEV · rank #82 · mostly Drupal Core, DrupalJan 2025: 74 CVEs · 12 critical · 0 now in CISA KEV · rank #15 · mostly Open Social, Node Access Rebuild Progressive, Two-factor Authentication (Tfa)Feb 2025: not on the top 200 that monthMar 2025: 30 CVEs · 3 critical · 0 now in CISA KEV · rank #31 · mostly Drupal, AI (Artificial Intelligence), Drupal CoreApr 2025: 18 CVEs · 0 critical · 0 now in CISA KEV · rank #48 · mostly Sportsleague, Stage File Proxy, Ueditor - 百度编辑器May 2025: 16 CVEs · 0 critical · 0 now in CISA KEV · rank #51 · mostly Enterprise Mfa - Tfa For Drupal, One Time Password, Single Content SyncJun 2025: 21 CVEs · 0 critical · 0 now in CISA KEV · rank #40 · mostly Simple Klaro, Quick Node Block, Cookies Consent ManagementJul 2025: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #131 · mostly Block Attributes, Config Pages Viewer, Cookies AddonsAug 2025: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #135 · mostly AI Seo Link Advisor, Authenticator Login, Config PagesSep 2025: not on the top 200 that monthOct 2025: 17 CVEs · 0 critical · 0 now in CISA KEV · rank #63 · mostly Facets, Civictheme Design System, API Key ManagerNov 2025: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #106 · mostly Drupal, Drupal Core, Email TfaDec 2025: not on the top 200 that monthJan 2026: 14 CVEs · 0 critical · 0 now in CISA KEV · rank #68 · mostly Acquia Content Hub, AI (Artificial Intelligence), Ckeditor 5 Premium FeaturesFeb 2026: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #146 · mostly At Internet Piano Analytics, At Internet Smarttag, Central Authentication System (Cas) ServerMar 2026: 25 CVEs · 0 critical · 0 now in CISA KEV · rank #46 · mostly Openid Connect / Oauth Client, File Access Fix (Deprecated), Anti-spam By CleantalkApr 2026: not on the top 200 that monthMay 2026: 14 CVEs · 1 critical · 1 now in CISA KEV · rank #82 · mostly Drupal Core, Drupal, Saml Sso - Service ProviderJun 2026: not on the top 200 that monthJul 2026: 46 CVEs · 5 critical · 0 now in CISA KEV · rank #17 · mostly Drupal, Drupal Core, Drupal CanvasAug 2026: 17 CVEs · 4 critical · 0 now in CISA KEV · rank #90 · mostly Drupal Core, Search API Autocomplete, Token Content AccessSep 2026 so far: 26 CVEs · 1 critical · 0 now in CISA KEV · rank #43 · mostly Gammu Sms Daemon, Screenshot, Dxpr Builder: The Best Editing (AI) Experience For Drupal
In the lens
The products that kept showing up in Drupal's monthly top three from Oct 2021 to Sep 2026. Move the lens and the list follows.
Year by year
Each year's months on the top 200 list. Pick a year to read it in the lens.
The record
- Peak rank
- #4 in Jul 2008
- Busiest month
- Jan 2025, 74 CVEs
- Months with a KEV entry
- 3 of 104 on the list
- On the top 200 list
- 104 of 259 monthly snapshots