Update to Drupal 9.5.10. For more information, see https://www.drupal.org/project/drupal/releases/9.5.10

[pantheon-upstream]

Update from Drupal 9.1.0 to Drupal 9.5.10.

This is experimental. Do not merge.

[guardrails]

⚠️ We detected 11 security issues in this pull request:

Hard-Coded Secrets (1)

Severity	Details	Docs
Medium	Title: Secret Keyword https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/modules/user/config/install/user.mail.yml#L34	📚

More info on how to fix Hard-Coded Secrets in General.

---

Information Disclosure (1)

Severity	Details	Docs
Medium	Title: Use of phpinfo() https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/modules/system/src/Controller/SystemInfoController.php#L62	📚

More info on how to fix Information Disclosure in PHP.

---

Insecure Access Control (1)

Severity	Details	Docs
Low	Title: Insecure HTTP redirect https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/.ht.router.php#L29	📚

More info on how to fix Insecure Access Control in PHP.

---

Insecure Processing of Data (2)

Severity	Details	Docs
Medium	Title: Unescaped user input in HTML https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/modules/ckeditor5/js/ckeditor5.es6.js#L652	📚
Medium	Title: Unescaped user input in HTML https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/modules/ckeditor5/js/ckeditor5.js#L291	📚

More info on how to fix Insecure Processing of Data in JavaScript.

---

Insecure Use of Dangerous Function (6)

Severity	Details	Docs
Medium	Title: Dynamic evaluation of untrusted input (Frontend) https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/modules/ckeditor5/js/ckeditor5.admin.es6.js#L328	📚
Medium	Title: Dynamic evaluation of untrusted input (Frontend) https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/modules/ckeditor5/js/ckeditor5.admin.es6.js#L737	📚
Medium	Title: Dynamic evaluation of untrusted input (Frontend) https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/modules/ckeditor5/js/ckeditor5.admin.js#L184	📚
Medium	Title: Dynamic evaluation of untrusted input (Frontend) https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/modules/ckeditor5/js/ckeditor5.admin.js#L386	📚
Medium	Title: Dynamic evaluation of untrusted input (Frontend) https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/themes/olivero/js/second-level-navigation.es6.js#L81	📚
Medium	Title: Dynamic evaluation of untrusted input (Frontend) https://github.com/pantheon-systems/drops-8/blob/8da4b9f5a8b97c6ff62f45ee06faa526f3d9221c/core/themes/olivero/js/second-level-navigation.js#L38	📚

More info on how to fix Insecure Use of Dangerous Function in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[pantheon-upstream]

Superseeded by #433.