Issue #1170362 by alexpott, catch, pillarsdotnet, sun, jofitz, geerlingguy, steinmb, tresti88, DamienMcKenna, dpovshed, imclean, bradjones1, mErilainen, David_Rothstein, KarenS, BTMash, rickmanelius, Anonymous, smustgrave, Wim Leers, kreynen, webchick, websiteworkspace, phenaproxima, Kiphaas7, bbrala: Install profile is disabled for lots of different reasons and core doesn't allow for that

Issue #2942016 by Rassoni, markconroy, David_Rothstein, kaythay, smustgrave, John Cook, catch: Add a hook_help() to the Umami profile, and link to it from the toolbar when the Help module is enabled

SA-CORE-2023-005 by benjifisher, Heine, cmlara, mlhess, larowlan, David_Rothstein, xjm, Wim Leers, DamienMcKenna, effulgentsia, pwolanin, mcdruid, poker10, jenlampton, longwave, kim.pepper, alexpott, drumm

Issue #1060476 by Arantxio, RoSk0, Renrhaf, ravi.shankar, mogtofu33, daffie, jordan.jamous, intrafusion, vsujeetkumar, tostinni, stefan.r, asad_ahmed, ozden_meren, jaredsmith, ridhimaabrol24, dark_ixion, quietone, ericsol, David_Rothstein, mradcliffe: Multiple issues when PostgreSQL is used with non-public schema

Issue #1763002 by dcam, idebr, David_Rothstein, marthinal, aerozeppelin, Lendude, wturrell, Abhijith S, vaibhavjain, nayana_mvr, smustgrave: Saving a node with an empty menu link title causes the menu link to silently not be created

Issue #1875020 by longwave, David_Rothstein, slip, alexpott, catch, smustgrave, jhodgdon: Cron queue gets processed every time cron is called, regardless of whether it's already being processed elsewhere

Issue #2927318 by andypost, David_Rothstein, ranjith_kumar_k_u, xjm, ksenzee: Status report shouldn't apologize for phpinfo() being disabled nor encourage people to enable it

Issue #1540390 by smustgrave, cosmicdreams, sun, alexpott, Chi, Mile23, dawehner, RobLoach, cweagans, David_Rothstein, webchick, borisson_, Unitoch: Deprecate the drupal.sh script

Issue #2828724 by Spokje, alexpott, ravi.shankar, Lal_, malcomio, ElusiveMind, smaz, yogeshmpawar, ridhimaabrol24, semiaddict, piggito, f.mazeikis, tvhung, tatarbj, ranjith_kumar_k_u, vijaycs85, baikho, Jelle_S, kleinmp, bbrala, Mike_info, David_Rothstein, pwolanin, cburschka: Username enumeration via one time login route

Issue #784672 by smustgrave, floretan, lokapujya, joegraduate, jcnventura, AndyF, joelpittet, darvanen, c960657, eiriksm, viappidu, jungle, ravi.shankar, DanielVeza, Meenakshi_j, gordon, raman.b, mohit_aghera, vsujeetkumar, aleevas, vakulrai, bruvers, larowlan, vpeltot, wjaspers, Sonal.Sangale, jan.stoeckler, jofitz, vdsh, minorOffense, LewisNyman, mgifford, Berdir, tstoeckler, Luke.Leber, Hanno, alexpott, andypost, yannickoo, hchonov, quietone, David_Rothstein, fgm, mr.baileys, MaxMendez, mpp: Allow text field to enforce a specific text format

Issue #2826592 by sourabh.singhal, jeffam, dhirendra.mishra, pk188, Manibharathi E R, krina.addweb, David_Rothstein, Berdir, shortspoken, ameymudras: No redirection to term view display page from term edit page

Issue #309040 by claudiu.cristea, David_Rothstein, Chi, BryanGullan, larowlan, dww, joachim: Add hook_requirements_alter()

Issue #332796 by voleger, dww, Steve Dondley, ykhadilkar, Dave Reid, ankithashetty, Anybody, benjifisher, mstrelan, David_Rothstein, phenaproxima, Bojhan: Add permissions to the update.module to hide warnings

Issue #1777270 by aries, quietone, AkashKumar07, shetpooja04, Devin Carlson, dermario, joshua1234511, ZeiP, smokris, David_Rothstein, danjro, smiletrl, longwave, balintk, Kristen Pol, larowlan, borisson_: Write tests for: Users with passwords over 60 characters cannot log in via the user login block

Issue #2946 by chx, michaellenahan, jcnventura, quietone, ifrik, wengerk, AaronBauman, salvis, pplantinga, sun, David_Rothstein, tatarbj, alexpott, Wim Leers, iMiksu, vijaycs85, anoopjohn, nedjo, Owen Barton, bjaspan, soxofaan, Gogowitsch, raman.b, robeano, deepakrmklm, bleen, xmacinfo, catch, beginner, dww, Gábor Hojtsy, webchick, Dries, larowlan, snufkin, RobRoy, bdragon, wizonesolutions, Lendude, sokru: Login fails and no warning is issued if cookies are not enabled

Issue #2938803 by David_Rothstein, spitzialist, vsujeetkumar, yepa, harsha012, ranjith_kumar_k_u, markconroy, ckrina, Rinku Jacob 13, Gauravmahlawat, longwave, Gábor Hojtsy: Remove the warning about the Umami profile on the install screen

Issue #3183301 by mcdruid, longwave, markwittens, nathandentzau, marcaddeo, janusman, -nrzr-, David_Rothstein, Heine, vijaycs85, xjm, tim.plunkett, pandaski, Wim Leers, larowlan: Add tests for SA-CORE-2020-009

Issue #1521996 by quietone, dww, Sophie.SK, Carsten Müller, Spokje, kim.pepper, izus, mjpa, ashu1629, AlanHDev, mangy.fox, Vivek Panicker, robpowell, jozzy_a, tar_inet, ravi.shankar, sokru, zuhair_ak, cjgratacos, aerozeppelin, darrenwh, lomasr, luismagr, mohit1604, ronald.garcia, matteodem, webchuck, gordon, nginex, jain_deepak, Aunion, ankitgarg, Elendev, Kristen Pol, alexpott, YesCT, dpi, no2e, larowlan, longwave, markpavlitski, acbramley, C_Logemann, cilefen, claudiu.cristea, penyaskito, David_Rothstein, Leeteq, anagp, jlbellido, pdrake, klausi: Password reset form reveals whether an email or username is in use

Issue #2577407 by vulcanr, jhodgdon, Sagar Ramgade, snehi, brahmjeet789, Manjit.Singh, Tony-Mac, ressa, xjm, cilefen, sajosh, ifrik, Charles Belov, Bojhan, David_Rothstein, Gábor Hojtsy, tkoleary, longwave, NickDickinsonWilde, nishantkumar155, shell_cm, greta_drupal, YesCT: Action of uploading module/theme files should consistently be called "Add", not "Install"

SA-CORE-2020-012 by ufku, mrf, fgm, samuel.mortenson, dww, Heine, mlhess, David_Rothstein, pwolanin, xjm, fgm, stefan.r, dsnopek, rickmanelius, David Strauss, tedbow, alexpott, dww, larowlan, kim.pepper, Wim Leers, quicksketch, mcdruid, Fabianx, effulgentsia, drumm, pandaski, Mixologic

Issue #1538118 by dww, swentel, dawehner, pwolanin, sanduhrs, alexpott, ayushmishra206, Wim Leers, yogeshmpawar, mgifford, cilefen, David_Rothstein, drumm, larowlan, Heine, colan, tedbow, benjifisher, klausi, borisson_, quietone: Update status does not verify the identity or authenticity of the release history URL

SA-CORE-2020-011 by David_Rothstein, Chi, elarlang, dokumori, kyk, xjm, mlhess, pwolanin, stefan.r, benjy, fgm, samuel.mortenson, larowlan, pandaski

SA-CORE-2020-009 by _nzr_, markwittens, nathandentzau, marcaddeo, janusman, larowlan, David_Rothstein, Wim Leers, vijaycs85, mcdruid, Heine, pandaski, xjm, tim.plunkett

(cherry picked from commit 284f58f0)

Issue #1831560 by acbramley, CRZDEV, mvwensen, fago, David_Rothstein, harsha012, Lendude, mrinalini9, Devin Carlson, borisson_, Gábor Hojtsy: Remove Html::resetSeenIds() call during form processing

SA-CORE-2019-012 by samuel.mortenson, larowlan, pwolanin, Sam152, Jasu_M, David_Rothstein, michieltcs, Ayesh, alexpott, xjm, vijaycs85, mcdruid

(cherry picked from commit 63efacbb)

Issue #1681832 by mcdruid, k_zoltan, dougvann, ZenDoodles, Cyberschorsch, kim.pepper, mohit1604, drumm, pdenooijer, eshta, mihai_brb, phiit, grwgreg, larowlan, amateescu, David_Rothstein, klausi, Damien Tournoud, coltrane, sun, aiypz, alippai: Password reset form has no flood protection

Issue #2820611 by YesCT, mkalkbrenner, Darren Oh, pwolanin, David_Rothstein, sidharrell, Sweetchuck: FileStorage generated .htaccess doesn't cover PHP 7

(cherry picked from commit eae8a6c1)

Issue #2942011 by tsega, imalabya, robindh, David_Rothstein, Eli-T, Gábor Hojtsy, markconroy, aburrows, ckrina, Gvert, alexpott, cchoudhary: Umami demo has display problems in right-to-left languages

SA-CORE-2018-006 by alexpott, attilatilman, bkosborne, catch, bonus, Wim Leers, Sam152, Berdir, Damien Tournoud, Dave Reid, Kova101, David_Rothstein, dawehner, dsnopek, samuel.mortenson, stefan.r, tedbow, xjm, timmillwood, pwolanin, njbooher, dyates, effulgentsia, klausi, mlhess, larowlan

Issue #2867757 by alexpott, Mile23, anavarre, David_Rothstein, cilefen, kylebrowning, xjm: Improve instructions for updating composer.json and /vendor

Issue #2142107 by drunken monkey, gilsbert, David_Rothstein, mondrake, Kristi Wachter: Complex cloned query dependent on __toString() call

Issue #2969053 by alexpott, tim.plunkett, Pere Orga, cashwilliams, Jasu_M, David_Rothstein, Heine, drumm, larowlan, pwolanin, xjm, dsnopek, dawehner, mlhess, quicksketch: Add unit tests for SA002 and SA004

Issue #2528284 by cilefen, dawehner, Cottser, David_Rothstein: Document that alternate Drupal 8 theme engines must implement auto-escape or they are not secure

SA-CORE-2018-004 by David_Rothstein, alexpott, larowlan, Heine, Pere Orga, tim.plunkett, mlhess, xjm, Jasu_M, drumm, cashwilliams, quicksketch, dawehner, pwolanin, samuel.mortenson

(cherry picked from commit bb6d3966)

SA-CORE-2018-002 by Jasu_M, samuel.mortenson, David_Rothstein, xjm, mlhess, larowlan, pwolanin, alexpott, dsnopek, Pere Orga, cashwilliams, dawehner, tim.plunkett, drumm

Issue #2883821 by David_Rothstein: Fix incorrect line spacing in private and temporary directory .htaccess files

SA-CORE-2018-001 by cashwilliams, catch, cilefen, droplet, dawehner, bonus, agentrickard, David_Rothstein, Chi, Gábor Hojtsy, Heine, Wim Leers, Schnitzel, drpal, effulgentsia, tedbow, tim.plunkett, tstoeckler, xjm, will_c, stefan.r, samuel.mortenson, larowlan, greggles, logaritmisk, mpdonadio, pwolanin, plach

Issue #2938643 by markconroy, andrewmacpherson, David_Rothstein, yoroy: Umami Banner Block does not have accessible text alternative at wide viewport