SA-CONTRIB-2026-139: Critical severity drupal/patreon vulnerability
Published Sep 9, 2026
·Updated
The Drupal Security Team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons.
Credit
Marcus Johansson (marcus_johansson)
Affected Software
1 affected component
drupal/patreon
Event History
Sep 9, 2026
Advisory Published
via Drupal·12:00 AM
Data Sourced
via Drupal·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Is there a fixed version available for this project?
No fixed version is identified. The project is being marked unsupported because a known security issue has not been fixed by its maintainer.
2
What should teams using this project do?
Teams should treat continued use as carrying an unresolved security issue and plan to replace, remove, or assume maintenance of the project. The advisory points prospective maintainers to Drupal’s process for taking over projects unsupported for security reasons.