Updated as new information comes in (D8 and D9 patch at the end of the page) The Drupal security team announced it on October 12 with PSA-2026-10-12: the critical core security update was released on Wednesday, October 14, 2026, with…
I've been working on decoupled Drupal projects for a few years now (Drupal as the back end for content editing, with an Angular front end or a mobile app, for example); in those cases you can use JSON:API or custom endpoints. Since…