[IT-SecNots] [Security-news] Security advisory coverage removed - PSA-2026-07-22

[security-news AT drupal.org]

View online: https://www.drupal.org/psa-2026-07-22

Date: 2026-July-22
Description: 
QA Accounts [1] enables you to login to a Drupal site using a well known
username/password combination. When 1.0 was released, it also was marked for
security coverage. The module prioritizes ease of use rather than security
and is only intended to be used on sites that are not accessible on the
internet (e.g. behind firewall or other protection). The maintainers are
choosing to remove security coverage.

Solution: 
Ensure qa_accounts is not enabled on any publicly available site.

Reported By: 
 * Jordan Barnes (j-barnes) [2]

Fixed By: 
 * Jakob P (japerry) [3]

------------------------------------------------------------------------------
Contribution record [4]

[1] https://www.drupal.org/project/qa_accounts
[2] https://www.drupal.org/u/j-barnes
[3] https://www.drupal.org/u/japerry
[4]  
https://new.drupal.org/contribution-record?source_link=https%3A//www.drupal.org/node/3612108

_______________________________________________
Security-news mailing list -- security-news AT drupal.org
To unsubscribe send an email to security-news-leave AT drupal.org
Unsubscribe at