{"slug": "advisories-in-five-months-results-from-the-drupal-ai-security-initiative", "title": "Advisories in Five Months: Results from the Drupal AI Security Initiative", "summary": "Drupal published 256 security advisories from June through October 2026, more than the 250 advisories issued across the previous 30 months combined, according to the Drupal Association's Drupal AI Security Initiative, funded by an Alpha-Omega SEIR grant received on May 19, 2026. Monthly advisory volume rose from an average of 8.3 per month between December 2023 and May 2026 to 28 in June, 74 in September and 106 in October, peaking at 39 advisories on October 28, with 134 people credited as reporters since June 1 versus 68 in all of 2025. The Association attributes the surge to AI-assisted analysis making latent bugs in mature core and contributed code cheap to find, and says the fractional funded team of fixer Drew Webber, reviewers Greg Knaddison and Michael Hess, and infrastructure engineer Neil Drumm kept the volunteer Security Team publishing without buckling.", "body_md": "[farriss](https://www.drupal.org/u/farriss)on\n\nWhen the Drupal Association launched the [Drupal AI Security Initiative](https://www.drupal.org/association/blog/introducing-the-drupal-ai-security-initiative-the-first-six-weeks) with Alpha-Omega this past June, our goal was to test whether a fractional, funded team, pairing fixers, reviewers, and infrastructure engineering alongside our volunteer Security Team, could protect maintainers from an incoming wave of AI-assisted vulnerability reports.\n\nFive months later, that anticipated wave is fully visible in the public data.\n\nFrom June through October 2026, Drupal published 256 security advisories. That five-month total exceeds the 250 advisories published across the previous 30 months combined. Baseline volume climbed from an average of 8 advisories per month in early 2026 to 28 in June, 74 in September, and 106 in October. The eight highest-volume publication days in our records since 2018 all landed within the last five months, peaking at 39 advisories on October 28.\n\nThe data marks the completion of our initial Clarity phase. It demonstrates why the economics of vulnerability discovery have permanently shifted and proves that **funding the complete review workflow is the only reason our volunteer process kept publishing without buckling**.\n\n*Monthly Drupal security advisories published from December 2023 to October 2026. The surge beginning in June 2026 reflects an increase in automated discovery velocity and disclosure throughput supported by the SEIR grant, not a shift in Drupal's codebase security.*\n\n## Why Advisory Volume Surged: The Changing Economics of Discovery\n\nThe surge in Drupal security advisories is driven by a fundamental shift in the economics of vulnerability discovery, not a change in Drupal’s underlying attack surface. The vulnerabilities surfacing in 2026 are primarily latent bugs in mature core and contributed code that AI-assisted analysis has made cheap, fast, and automatable to identify across projects simultaneously. Since 1 June, 134 different people have been credited as reporters on Drupal advisories. In all of 2025, 68 people were.\n\nThe volume of advisories and CVEs Drupal has experienced between June and October is not an isolated event. Telemetry shared across the Alpha-Omega cohort and confirmed in our discussions with global edge security teams reveals that this massive, simultaneous surge in automated vulnerability disclosures is playing out across every major open-source ecosystem.\n\nMost of these reports came from volunteers and outside researchers, many of them using AI tools. Every advisory represents a real issue that was found, fixed, reviewed, and disclosed responsibly. That is the system working. The question the Clarity phase set out to answer was whether it could keep working at this pace.\n\n## About the SEIR Grant\n\nThe grant came at exactly the right time. The Drupal Association received it from Alpha-Omega on May 19, 2026, and the funded team started work in early June. That same month, advisory volume began to rise: 28 advisories in June, against an average of 8.3 a month from December 2023 through May 2026. The Security Team could not have handled this volume without the grant.\n\nThe grant subsidizes part of the time for a fractional team. **Drew Webber** ([@mcdruid](https://www.drupal.org/u/mcdruid)) is the Fixer: he finds issues, writes patches, and builds tooling. **Greg Knaddison** ([@greggles](https://www.drupal.org/u/greggles)) and **Michael Hess** ([@mlhess](https://www.drupal.org/u/mlhess)) are the Reviewers: they triage reports and review fixes. **Neil Drumm** ([@drumm](https://www.drupal.org/u/drumm)) covers Drupal.org infrastructure. **Tim Lehnen** ([@hestenet](https://www.drupal.org/u/hestenet)) and I coordinate the program for the Drupal Association. The team works alongside the volunteer Drupal Security Team, which has kept up its usual work throughout.\n\nIn July, we reported 10 resolved security issues in the first six weeks, against a commitment of 8 for the whole grant. The credits on published advisories show where the funded time has gone since then:\n\n| Area of Work | June–Oct 2026 (SEIR Active) | June–Oct 2025 (Baseline) | Initiative Impact | \n|---|---|---|---|\n| **Advisories with SEIR Participation** | **223** of 256 (87%) | 32 of 36 | Absorbed the surge across core and contrib | \n| **Advisories Coordinated by Greg (@greggles)** | **203** | 31 | 6.5x increase in coordination throughput | \n| **Advisories Involving Drew (@mcdruid)** | **99** (37 reporter / 17 fixer) | 8 (1 fixer) | Shifted focus by August 2026 from reporting to fixing/review | \n| **Advisories Crediting Team as Reporter/Fixer** | **43** (inc.[SA-CORE-2026-014](https://www.drupal.org/sa-core-2026-014) ) | 1 | Hands-on remediation on critical issues | \n\n**Without the SEIR program, the SEIR team members would not have been able to adapt and scale to the increased volume as they have.**\n\n## Phase 1 Lessons: Discovery Is Cheap, Intake Is the Bottleneck\n\n- **Finding vulnerabilities is no longer the slow step.** AI-assisted analysis made discovery cheap, so the work piled up later in the process: first in reviewing fixes, then in intake, where someone has to decide whether a new report is valid, whether it is new, and who should handle it.\n- **Our own process showed strain.** The busiest publication days were preceded by review work piling up against the release deadline. A process that depends on a push at the deadline does not scale, so we are trying changes as ordinary as a standing early-week review pass.\n- **The SEIR cohort connected Drupal to partners.** Through the cohort, Drupal joined[Patch the Planet](https://patchtheplanet.org/) , run by Trail of Bits and OpenAI. A Trail of Bits report against one contributed module led to[SA-CORE-2026-014](https://www.drupal.org/security/core/sa-core-2026-014) , a critical fix in Drupal core released on October 14.\n- **Shared scanning tools can miss code silently.** Opengrep's PHP parser skipped valid PHP 8 code without reporting an error, in about 350 files across 176 contributed projects and every supported branch of core. We reported it, and the fix was merged upstream on September 1, so every Opengrep user gets it.\n- **Drupal adds depth to the SEIR cohort.** Other ecosystems in the cohort bring reach and volume. Drupal brings a large, long-lived codebase with security coverage across thousands of projects, which tests shared tools hard. When those tests find a problem, as with Opengrep, the fix goes upstream to everyone.\n- **Some bugs follow systemic patterns best addressed architecturally.** Six hardening changes went into Drupal core through the public issue queue, including three that neutralize known gadget chains used in PHP object injection attacks (see[Issue #3524971](https://www.drupal.org/project/drupal/issues/3524971) and[related core hardening commits](https://git.drupalcode.org/project/drupal/-/commit/002ac383019edb22759bfce953c1e8da22c5dc48) ).\n- **AI tools for maintainers with guardrails.** Triagebot posts one message per new report, with a suggested classification and any likely duplicates, and does nothing else. AI-assisted tooling also proposes weakness classifications for Drupal's CVE records, with mandatory human verification on every entry. Since mid-August 2026, Triagebot has triaged hundreds of new reports into the Security Team's Slack channel, flagging roughly 20% as probable duplicates.\n- **Release capacity is the next constraint.** A security fix reaches sites only when a release ships. Core maintainers have opened proposals to[change the security release process](https://git.drupalcode.org/project/drupalorg/-/work_items/3607068) . It’s clear that core release management needs more resources (funding, people) as well.\n\n## Phase 2 (Attention): Hardening GitLab Intake and Release Pipelines\n\nAttention focuses on intake, in two directions:\n\n1. Triage: we are extending Triagebot from Slack notifications to the GitLab API, so classification and duplicate detection happen where reports are filed, under the same one-action rule.\n2. Reporting: with the Security Team and maintainers, we are writing a working standard for what a useful AI-assisted security report must contain.\n\nAlongside that, core maintainers have opened proposals to make security releases faster and more predictable.\n\n## Upcoming Deep Dives: Upstream Fixes, Tooling, and Standards\n\nOver the next few weeks, we will publish a short posts about:\n\n- How a report from Trail of Bits, through the Patch the Planet program, became the critical core fix SA-CORE-2026-014\n- How we identified a silent parser bug in Opengrep, patched it upstream, and landed six systemic hardening changes in Drupal core\n- The tools engineered for Security Team intake, and what we suggest to open-source projects evaluating automated AI scanning\n\n## Thanks\n\nThank you to [Alpha-Omega](https://alpha-omega.dev/), the [Open Source Security Foundation (OpenSSF)](https://openssf.org/), and the [Linux Foundation](https://www.linuxfoundation.org/) for the grant, and for access to AI tooling from [Anthropic](https://www.anthropic.com/). Thank you to [Trail of Bits](https://www.trailofbits.com/) and [OpenAI](https://openai.com/) for Patch the Planet; to the [Open Source Technology Improvement Fund (OSTIF)](https://ostif.org/) and the [PHP Foundation](https://thephp.foundation/) for tooling and protocols we now use daily; and to the SEIR cohort across a dozen ecosystems, including [Ruby](https://rubycentral.org/), [Rust](https://rustfoundation.org/), [Node.js](https://openjsf.org/), [Python](https://www.python.org/psf/), [Perl](https://www.perlfoundation.org/), [Erlang](https://erlef.org/), [FreeBSD](https://freebsdfoundation.org/), and [Eclipse](https://www.eclipse.org/), for comparing notes every week.\n\nMost of all, thank you to the volunteers on the [Drupal Security Team](https://www.drupal.org/drupal-security-team), who have protected Drupal sites for more than 20 years and kept doing so through the busiest five months in our records.", "url": "https://wpnews.pro/news/advisories-in-five-months-results-from-the-drupal-ai-security-initiative", "canonical_source": "https://www.drupal.org/blog/256-advisories-in-five-months-results-from-the-drupal-ai-security-initiative", "published_at": "2026-10-29 14:52:34+00:00", "updated_at": "2026-10-29 15:17:28.625341+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence", "ai-tools"], "entities": ["Drupal Association", "Alpha-Omega", "Drupal", "Drew Webber", "Greg Knaddison", "Michael Hess", "Neil Drumm", "Tim Lehnen"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/advisories-in-five-months-results-from-the-drupal-ai-security-initiative", "markdown": "https://wpnews.pro/news/advisories-in-five-months-results-from-the-drupal-ai-security-initiative.md", "text": "https://wpnews.pro/news/advisories-in-five-months-results-from-the-drupal-ai-security-initiative.txt", "jsonld": "https://wpnews.pro/news/advisories-in-five-months-results-from-the-drupal-ai-security-initiative.jsonld"}}