View online: https://www.drupal.org/sa-contrib-2018-012 Project: Entity Backup [1] Date: 2018-February-14 Security risk: *Critical* 18∕25 AC:None/A:None/CI:Some/II:Some/E:Proof/TD:Default [2] Vulnerability: Module Unsupported Description: The main purpose of the Entity Backup module is to keep a backup of deleted Drupal core entities and perform recovery of them. The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module, please read: https://www.drupal.org/node/251466 [3] Solution: Uninstall the module Reported By: Jean-Francois Hovinne [4] Fixed By: N/A Coordinated By: N/A [1] https://www.drupal.org/project/entity_backup [2] https://www.drupal.org/security-team/risk-levels [3] https://www.drupal.org/node/251466 [4] https://www.drupal.org/u/jfhovinne