{"product":"drupal","productName":"Drupal","version":"10.2.12","verdict":"actively_exploited","activelyExploited":true,"eol":{"isEol":true,"since":"2024-12-17","cycle":"10.2"},"counts":{"critical":1,"high":1,"medium":15,"low":2,"unknown":2},"vulnerabilities":[{"id":"CVE-2026-9082","severity":"critical","score":9.8,"kev":true,"fixedIn":"10.4.10","advisoryUrl":"https://www.drupal.org/sa-core-2026-004"},{"id":"CVE-2025-31674","severity":"high","score":7.5,"kev":false,"fixedIn":"10.3.13","advisoryUrl":"https://www.drupal.org/sa-core-2025-003"},{"id":"CVE-2026-6366","severity":"medium","score":6.6,"kev":false,"fixedIn":"10.5.9","advisoryUrl":"https://www.drupal.org/sa-core-2026-002"},{"id":"CVE-2026-6365","severity":"medium","score":6.1,"kev":false,"fixedIn":"10.5.9","advisoryUrl":"https://www.drupal.org/sa-core-2026-001"},{"id":"CVE-2025-3057","severity":"medium","score":6.1,"kev":false,"fixedIn":"10.3.13","advisoryUrl":"https://www.drupal.org/sa-core-2025-001"},{"id":"CVE-2026-55806","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-007"},{"id":"CVE-2026-55804","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-006"},{"id":"CVE-2026-55803","severity":"medium","score":5.9,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-005"},{"id":"CVE-2025-13081","severity":"medium","score":5.9,"kev":false,"fixedIn":"10.4.9","advisoryUrl":"https://www.drupal.org/sa-core-2025-006"},{"id":"CVE-2026-55808","severity":"medium","score":5.4,"kev":false,"fixedIn":"11.2.14","advisoryUrl":"https://www.drupal.org/sa-core-2026-009"}],"moreVulnerabilities":11,"upgrade":{"recommended":"11.3.20"},"notes":[],"checkedAt":"2026-10-25","dataGeneratedAt":"2026-10-24T23:52:50.693Z"}