View online: https://www.drupal.org/psa-2026-07-22 Date: 2026-July-22 Description: QA Accounts [1] enables you to login to a Drupal site using a well known username/password combination. When 1.0 was released, it also was marked for security coverage. The module prioritizes ease of use rather than security and is only intended to be used on sites that are not accessible on the internet (e.g. behind firewall or other protection). The maintainers are choosing to remove security coverage. Solution: Ensure qa_accounts is not enabled on any publicly available site. Reported By: * Jordan Barnes (j-barnes) [2] Fixed By: * Jakob P (japerry) [3] ------------------------------------------------------------------------------ Contribution record [4] [1] https://www.drupal.org/project/qa_accounts [2] https://www.drupal.org/u/j-barnes [3] https://www.drupal.org/u/japerry [4] https://new.drupal.org/contribution-record?source_link=https%3A//www.drupal....