Is Drupal 8.8.12 patched?
Drupal · cycle 8.8 · end of life · Official site ↗
0/100Critical · exploited
Minimum safe version10.4.10
8.8.12 has 16 open critical-or-high vulnerabilities. Run 10.4.10 or later to clear them. See what 10.4.10 fixes →
Known issues affecting 8.8.12
Exploited first, then by exploitation probability.
CVE-2020-28949 HIGH ● exploited EPSS 93% → fixed in 9.0.9 CVE-2020-28948 HIGH EPSS 77% → fixed in 9.0.9 CVE-2024-55636 CRITICAL EPSS 11% → fixed in 11.0.8 CVE-2024-55637 CRITICAL EPSS 10% → fixed in 11.0.8 CVE-2024-55638 CRITICAL EPSS 10% → fixed in 10.3.9 CVE-2022-39261 HIGH EPSS 10% → fixed in 9.4.7 CVE-2024-12393 MEDIUM EPSS 3% → fixed in 11.0.8 CVE-2022-25277 HIGH EPSS 2% → fixed in 9.4.3 CVE-2023-5256 HIGH EPSS 1% → fixed in 10.1.4 CVE-2024-55634 HIGH EPSS 1% → fixed in 11.0.8 CVE-2022-24729 MEDIUM EPSS 1% → fixed in 9.3.8 CVE-2022-24728 MEDIUM EPSS 1% → fixed in 9.3.8 CVE-2022-24775 HIGH EPSS 1% → fixed in 9.3.9 CVE-2020-13675 CRITICAL EPSS 1% → fixed in 9.2.6 CVE-2024-11941 HIGH EPSS 1% → fixed in 10.2.2 CVE-2022-25275 HIGH EPSS 1% → fixed in 9.4.3 CVE-2022-25278 MEDIUM EPSS 0% → fixed in 9.4.3 CVE-2022-25273 HIGH EPSS 0% → fixed in 9.3.12 CVE-2025-3057 MEDIUM EPSS 0% → fixed in 11.1.3 CVE-2025-31674 HIGH EPSS 0% → fixed in 11.1.3