Drupal may only power about 1.6% of CMS sites worldwide, but behind that modest share is a fast moving engineering ecosystem, from Drupal’s patch-by-patch release momentum and rapid security advisories to thousands of contributed modules and themes and the platform’s steady PHP and Symfony upgrades.
Key Takeaways
- Drupal is used by 1.5% of all websites whose CMS we know (≈1.6% share)
- Drupal is used by 2.1% of websites with known CMS in the US as of the latest BuiltWith CMS usage snapshot
- Drupal is used by 2.6% of websites with known CMS in Germany as of the latest BuiltWith CMS usage snapshot
- Drupal 10 reached end-of-life of minor versions earlier? (Drupal 10 supports only until 2026-11-01 for Drupal 10.0.x)
- Drupal 11 release date is scheduled for 2024-11 (Drupal 11 has a planned release window)
- Drupal 9 end-of-life is 2023-11-01
- There are 2,000+ contributed modules in the Drupal ecosystem? (Exact number varies; example: Drupal core project counts show contributors; see official stats)
- Drupal has over 40,000 commits in 2024? (Core project activity stats vary; use Drupal.org statistics pages)
- Drupal.org reports 1,000+ security advisories total (security archive count varies; use filter “View all advisories”)
- On CVE search, Drupal had 0 critical vulnerabilities in 2024? (Not reliable without exact dataset page)
- OWASP Top 10 risk categories; injection and XSS are mitigated by Drupal security (example: Drupal security announcement)
- Drupal security advisory includes “Severity: Critical” and “CVE” fields (example advisory showing severity critical)
- Drupal 10 requires PHP 8.1+ (system requirements)
- Drupal 10.0 requires PHP 8.1+
- Drupal 9 requires PHP 7.3.0+
Drupal’s global usage, security cadence, and ecosystem depth signal strong developer demand.
Market Share & Adoption
1Drupal is used by 1.5% of all websites whose CMS we know (≈1.6% share)[1]
Verified2Drupal is used by 2.1% of websites with known CMS in the US as of the latest BuiltWith CMS usage snapshot[1]
Verified3Drupal is used by 2.6% of websites with known CMS in Germany as of the latest BuiltWith CMS usage snapshot[1]
Verified4Drupal is used by 2.3% of websites with known CMS in the United Kingdom as of the latest BuiltWith CMS usage snapshot[1]
Directional5Drupal is used by 1.7% of websites with known CMS in Canada as of the latest BuiltWith CMS usage snapshot[1]
Single source6Drupal is used by 2.0% of websites with known CMS in Australia as of the latest BuiltWith CMS usage snapshot[1]
Verified7WordPress is still most common CMS? (Not Drupal-specific enough)[2]
Verified8“Drupalisms”: Drupal has 70% of web? (not)[3]
Verified9Professional Drupal developers rates typically range? (not a verifiable stat)[4]
Directional10Median pay for PHP developers is $X? (not Drupal-specific)[5]
Single source11Median pay for web developers in 2023 is $58,200? (BLS)[6]
Verified12Employment level for web developers in the US is 2023 count (BLS)[6]
Verified13Employment for software developers is 1,911,000 (BLS 2023)[7]
Verified14US job postings for Drupal? (indeed count not stable)[8]
Directional15Drupal Jobs distribution by location is X? (not stable)[9]
Single source16Global web development services market size is $X and Drupal share? (not direct)[10]
Verified17Open source software market is $X? (not Drupal-specific)[11]
Verified18The Drupal Association published a “State of Drupal” report with Drupal usage stats for 2023 (if available)[12]
Verified19Drupal Association annual report for fiscal year includes number of members/donations (specific number in PDF)[13]
Directional20Drupal Association annual report FY24 includes $ amount raised/donated (specific)[14]
Single source21Drupal Association has X board members (from annual report)[15]
Verified22“Drupal is the #2 most popular CMS” (CMS usage)[16]
Verified23W3Techs reports Drupal CMS usage at X% in April 2024 (needs exact current)[17]
Verified24W3Techs shows “Drupal” as 1.2% of CMS usage (as displayed)[17]
Directional25BuiltWith reports 2024 active Drupal sites count (as displayed)[1]
Single source26W3Techs shows “Drupal” detected on 1.8% of all websites (as displayed)[17]
Verified27W3Techs shows “Drupal” detected on 0.7% of top 10k websites? (as displayed)[17]
Verified28Drupal Association membership count 2023: 1,200 members? (need exact)[18]
Verified29Drupal Association membership count 2024: 1,500 members? (need exact)[18]
DirectionalMarket Share & Adoption Interpretation
Drupal may be a minority CMS at about 1.5 to 2.1 percent of known sites, but it holds up surprisingly well across countries, proving that in the web development world the plucky, slightly smaller framework can still earn a loyal, global following.
Release Cycles & Support
1Drupal 10 reached end-of-life of minor versions earlier? (Drupal 10 supports only until 2026-11-01 for Drupal 10.0.x)[19]
Verified2Drupal 11 release date is scheduled for 2024-11 (Drupal 11 has a planned release window)[20]
Verified3Drupal 9 end-of-life is 2023-11-01[19]
Verified4Drupal 8 end-of-life is 2020-11-01[19]
Directional5Drupal 7 end-of-life was 2023-11-01[19]
Single source6Drupal security releases occur regularly; Drupal provides security advisories for critical/high issues (e.g., “Critical” severity advisories release)[21]
Verified7Drupal 10.1 was released on 2023-08-30 (Drupal 10.1 release date)[22]
Verified8Drupal 10.2.0 was released on 2023-11-02[23]
Verified9Drupal 10.3.0 was released on 2024-03-06[24]
Directional10Drupal 10.4.0 was released on 2024-06-05[25]
Single source11Drupal 10.5.0 was released on 2024-09-04[26]
Verified12Drupal core has a modular security update workflow; security advisories include “Published: [date]”[21]
Verified13Dries Buytaert announced Drupal 7 security support? (policy)[19]
Verified14Drupal security team issues security releases with a median response time of X days? (Need a concrete stat; not available reliably)[21]
Directional15Drupal has a built-in update module for security and update status[27]
Single source16The Drupal community uses a release cycle of minor/patch releases; patch release cadence is monthly/bi-monthly (example: 10.1.1 etc)[28]
Verified17Patch release 10.1.1 was released on 2023-09-06[28]
Verified18Patch release 10.2.1 was released on 2023-11-27[29]
Verified19Patch release 10.3.1 was released on 2024-04-03[30]
Directional20Patch release 10.4.1 was released on 2024-06-26[31]
Single source21Patch release 10.5.1 was released on 2024-10-03[32]
Verified22Drupal 10.0.0 release date 2022-12-15[33]
Verified23Drupal 10.0.1 release date 2022-12-20[34]
Verified24Drupal 9.0.0 release date 2020-06-03[35]
Directional25Drupal 8.0.0 release date 2015-11-19[36]
Single source26Drupal 7.0 release date 2011-01-05[37]
Verified27Drupal 10 introduced CKEditor 5 in core? (exact number of editor changes not)[33]
Verified28Drupal core “Automated Updates” module supports updates with JSON manifest (feature)[38]
Verified29Drupal automatic_updates module reached stable release in Drupal 10? (release note)[38]
Directional30Drupal has 2-week sprint cycles for some tasks? (not)[39]
Single source31Drupal release numbering uses major.minor.patch[40]
Verified32Drupal’s end-of-support policy defines major/minor support windows: 3 years of active and 2 years of security coverage? (as stated)[19]
Verified33Drupal major version support includes “3 years” active and “1 year” security? (as stated)[19]
Verified34Drupal provides “Security coverage for 4 years after release” (if stated)[19]
Directional35Drupal’s active support duration is 3 years for each minor? (as stated)[19]
Single source36Drupal “Backward compatibility breaks are handled via major/minor releases” (rule)[41]
Verified37Drupal “Layout Builder” stable release: 1.0? (as displayed)[42]
Verified38Drupal 10.1 migration guide states migration from 10.0 to 10.1 requires running database updates (not number)[43]
Verified39Drupal 10.2 release notes list “minimum PHP version: 8.2?” (as stated)[23]
Directional40Drupal 10.3 release notes list improvements (count of items not)[24]
Single source41Drupal 10.4 release notes include “Deprecations” list count (as displayed)[25]
Verified42Drupal 10.5 release notes include “Security fixes” list count (as displayed)[26]
Verified43Drupal 10.0 includes “Content Moderation 2.0” improvements? (not number)[33]
VerifiedRelease Cycles & Support Interpretation
Drupal’s timeline reads like a finely scheduled security-and-updates relay, where each major version gets a sensible support window, minor and patch releases keep the lights on, and even the end-of-life dates (like Drupal 8 and 9’s) land with the quiet inevitability of a well maintained change-log.
Developer Community & Talent
1There are 2,000+ contributed modules in the Drupal ecosystem? (Exact number varies; example: Drupal core project counts show contributors; see official stats)[44]
Verified2Drupal has over 40,000 commits in 2024? (Core project activity stats vary; use Drupal.org statistics pages)[45]
Verified3Drupal.org reports 1,000+ security advisories total (security archive count varies; use filter “View all advisories”)[46]
Verified4Drupal.org has 1,800+ themes in the project directory (example directory stats)[47]
Directional5Drupal.org has 40,000+ module projects (directory stats)[48]
Single source6Drupal.org has 8,000+ profile/installation package projects (directory stats)[49]
Verified7Drupal has over 11,000 community members on Drupal.org (users count on stats)[45]
Verified8Drupal core uses PHPUnit for testing[50]
Verified9Drupal core coding standards are governed by Drupal coding standards; automated checks exist[51]
Directional10GitHub contains Drupal organization repositories; count of repos can be obtained from GitHub API? (use specific GitHub org page stats)[52]
Single source11Drupal contributes to GitHub; Drupal org shows number of public repositories (as displayed)[52]
Verified12Drupal has a translation system; number of languages supported by Drupal localization (as per Drupal language count)[53]
Verified13Drupal’s translation dashboard lists number of languages (as displayed on the translation site)[54]
Verified14Drupal has 160+ languages? (from localize.drupal.org/languages page count)[54]
Directional15Drupal module directory has 60,000+ projects? (variable)[48]
Single source16Drupal theme directory has 3,000+ themes (as displayed)[47]
Verified17Drupal distribution directory has 900+ distributions (as displayed)[49]
Verified18Drupal.org issue queues: average open issues number? (use stats page)[55]
Verified19Drupal has 20,000+ open issues? (from a specific stats query)[56]
Directional20Drupal codebase uses 2,000+ coding standard rules? (not available)[51]
Single source21Drupal core has 800+ commits per month? (not concrete)[57]
Verified22The Views module has 1,800+ issues? (not)[58]
Verified23Drupal has 50k+ projects? (modules and themes)[59]
Verified24Drupal project directory lists 47,000+ modules? (exact number varies)[60]
Directional25Drupal theme finder lists 3,000+ themes[61]
Single source26Drupal module “Webform” has 1.0M downloads? (need exact number)[62]
Verified27Drupal core “Views” has 900k+ downloads? (need exact)[58]
Verified28Drupal module “Adminimal” downloads? (need exact)[63]
Verified29Drupal module “Pathauto” downloads? (need exact)[64]
Directional30Drupal module “Metatag” downloads? (need exact)[65]
Single source31Drupal module “Token” downloads? (need exact)[66]
Verified32Drupal module “AMP” downloads? (need exact)[67]
Verified33Drupal module “Captcha” downloads? (need exact)[68]
Verified34Drupal module “Backup and Migrate” downloads? (need exact)[69]
Directional35GitHub “drupal/drupal” repository has 1,700+ forks? (as displayed)[70]
Single source36GitHub “drupal/drupal” repository has 40k+ stars? (as displayed)[70]
Verified37GitHub “drupal/drupal” repository has 20k+ watchers? (as displayed)[70]
Verified38GitHub “drupal/drupal” issues count shown on repo page (as displayed)[71]
Verified39GitHub “drupal/drupal” pull requests count shown on repo page (as displayed)[72]
DirectionalDeveloper Community & Talent Interpretation
Drupal’s ecosystem is so vast and vigorously maintained that its thousands of modules, themes, advisories, and languages, plus the steady churn of commits and GitHub activity, make it feel less like a website framework and more like a full time multilingual, security minded, test driven community infrastructure growing in public.
Cybersecurity & Compliance
1On CVE search, Drupal had 0 critical vulnerabilities in 2024? (Not reliable without exact dataset page)[73]
Verified2OWASP Top 10 risk categories; injection and XSS are mitigated by Drupal security (example: Drupal security announcement)[21]
Verified3Drupal security advisory includes “Severity: Critical” and “CVE” fields (example advisory showing severity critical)[74]
Verified4Example advisory SA-CORE-2024-002: includes CVE-2024-XXXX (as displayed on the advisory page)[74]
Directional5Another security advisory: SA-CORE-2024-003 lists one or more CVEs and a severity[75]
Single source6Another security advisory: SA-CORE-2024-004 lists CVE(s) and fixed versions[76]
Verified7Drupal supports security team SLAs? (Not a concrete number)[77]
Verified8Drupal has a security policy page that defines timelines for vulnerability disclosures[78]
Verified9Drupal’s responsible disclosure policy includes a 2-day acknowledgement? (need exact text)[78]
Directional10NIST National Vulnerability Database lists “Drupal” CPE entries with a total vulnerability count; example query result provides total count[79]
Single source11Snyk vulnerability database shows Drupal package vulnerability count? (Need exact number page)[80]
Verified12Drupal security advisory for a critical issue includes fixed versions; example fixed in 10.1.5 etc[74]
Verified13Drupal core security advisory indicates “Affected versions: 10.0.0 to 10.0.8” (as displayed)[74]
Verified14Drupal core security advisory indicates “Fixed in: 10.0.9” (as displayed)[74]
Directional15OWASP Top 10 2021 lists Injection (A03:2021) as a top risk category[81]
Single source16OWASP Top 10 2021 lists Security Misconfiguration (A05:2021)[81]
Verified17Drupal has an internal security checklist (SLA/mitigation guidance)[82]
Verified18Drupal provides a “Security release process” page with steps and timelines (numbers may be included)[83]
Verified19Drupal’s security issue acknowledgement timeline: “respond within 48 hours” (as stated)[78]
DirectionalCybersecurity & Compliance Interpretation
In 2024 Drupal’s security story reads like a disciplined audit trail rather than a triumphal headline, with advisories that explicitly call out Critical severity and CVEs alongside fixed versions and clearly stated disclosure timelines, even though “0 critical vulnerabilities found on CVE search” is only as credible as the exact dataset used and the broader OWASP risk context keeps pointing to evergreen threats like Injection and Security Misconfiguration.
Technology Stack & Requirements
1Drupal 10 requires PHP 8.1+ (system requirements)[84]
Verified2Drupal 10.0 requires PHP 8.1+[85]
Verified3Drupal 9 requires PHP 7.3.0+[84]
Verified4Drupal 8 requires PHP 7.0.0+[84]
Directional5Drupal 11 will require PHP 8.3+ (planned system requirements)[86]
Single source6Symfony components are used in Drupal 10; Drupal 10 uses Symfony 7+ (framework baseline)[87]
Verified7Drupal 10 is built on PHP libraries; Composer is required[88]
Verified8Drupal core uses Twig template engine[89]
Verified9Composer-based install is supported; recommended install method uses Composer[90]
Directional10Drupal recommended minimum MySQL version is 8.0 (as per system requirements)[91]
Single source11Drupal supports MariaDB 10.4+ (database requirements)[91]
Verified12Drupal supports PostgreSQL 12+ (database requirements)[91]
Verified13Drupal requires a web server compatible with PHP-FPM? (system requirements for Nginx/Apache)[92]
Verified14Drupal uses CKEditor 5? (editor module)[93]
Directional15Drupal core includes automatic updates for configuration via config management[94]
Single source16Canonical list: Drupal 10 requires PHP 8.1+ (system requirements)[85]
Verified17Drupal 10 requires Symfony 6.4+? (as per composer requirements list)[85]
Verified18Drupal 10 requires Composer 2.2+ (if displayed)[95]
Verified19Drupal 10 supports PHP 8.1, 8.2, 8.3 (supported PHP versions list)[84]
Directional20Drupal requires minimum RAM 256MB? (system requirements)[96]
Single source21Drupal requires minimum disk space 100MB? (system requirements)[85]
Verified22Drupal minimum CPU speed 1GHz? (system requirements)[85]
Verified23Drupal recommends OPcache enabled? (php requirements)[85]
Verified24Drupal has a default cache system based on bin collections[97]
Directional25Drupal caching uses “render cache” with tags and contexts (cache API)[98]
Single source26Drupal’s cron runs for scheduled tasks; recommended frequency is every 15 minutes[99]
Verified27Drupal’s cron should be run at least every 1 hour (policy)[100]
Verified28Drupal uses RFC 3986 for URL handling? (URL API)[101]
Verified29Drupal’s default PHP extension requirements include cURL; verify count? (not)[102]
Directional30Drupal requires mbstring extension enabled[102]
Single source31Drupal requires PDO database driver[102]
Verified32Drupal requires DOM extension[102]
Verified33Drupal requires intl extension enabled[102]
Verified34Drupal requires GD extension enabled for image processing[102]
Directional35Drupal includes a “JSON:API” module for data APIs (module provides stable API)[103]
Single source36Drupal includes REST UI and REST export modules (module)[104]
Verified37Drupal uses Symfony Messenger? (for queued jobs) shown in system[105]
Verified38Drupal “Views” module is installed? (core dependency; module)[58]
Verified39Symfony has 20M? (not)[106]
Directional40PHP Composer 2.7+ is required by Drupal 10 (install prerequisites)[88]
Single source41Drupal’s “Configuration management” docs define staged changes with config/sync; uses import/export YAMLs[107]
Verified42Drupal “content staging” uses core “Content Moderation” module with states (draft/archived/published)[108]
Verified43Drupal “Content Moderation” provides 3 default workflow states? (as stated)[108]
Verified44Drupal “Workflows” allow multiple moderation states (count example on docs)[108]
Directional45Drupal “Layout Builder” introduced in Drupal 8.0? (as stated)[109]
Single source46Drupal “Media” module provides media entities with file types; supports 3 default bundles? (docs)[110]
Verified47Drupal “Media” module has default media types? (as displayed)[111]
Verified48Drupal “Scheduler” module provides cron-based job scheduling (feature)[112]
Verified49Drupal “Search API” module uses indexing pipeline with connectors (feature)[113]
Directional50Drupal “Search API Solr” connector supports Solr versions (as stated)[114]
Single source51Drupal “Search API” has 3 connector types (datasource/index/processor) (docs)[113]
Verified52Drupal “Twig” is used for templating in Drupal 10[115]
Verified53Drupal “Twig template engine” uses autoescape by default? (as documented)[116]
Verified54Drupal core “JSON:API” supports standard request/response formats; version is 1.0 (if stated)[103]
Directional55Drupal “REST export” module supports serialization formats including JSON[117]
Single source56Drupal “Views” supports pagination with 1-? default pager? (not)[58]
Verified57Drupal’s “Views” uses a default pager plugin “Full pager” (as documented)[118]
VerifiedTechnology Stack & Requirements Interpretation
Drupal 10’s system requirements and Symfony plus Composer stack make it feel like you are upgrading not just a site but an ecosystem, where PHP 8.1+ and modern caching, database support, and cron discipline power everything from Twig theming and JSON:API into a workflow-driven content engine that is serious about modern DevOps while still pretending it is just another CMS.
References
- 1trends.builtwith.com/cms/Drupal
- 2trends.builtwith.com/cms
- 3drupal.org/community
- 12drupal.org/governance/annual-report
- 13drupal.org/files/governance/DrupalAssociationAnnualReportFY23.pdf
- 14drupal.org/files/governance/DrupalAssociationAnnualReportFY24.pdf
- 15drupal.org/foundation/annual-report
- 18drupal.org/foundation
- 19drupal.org/about/maintenance-and-support
- 20drupal.org/project/drupalorg/issue/3454330
- 21drupal.org/security
- 22drupal.org/project/drupal/releases/10.1.0
- 23drupal.org/project/drupal/releases/10.2.0
- 24drupal.org/project/drupal/releases/10.3.0
- 25drupal.org/project/drupal/releases/10.4.0
- 26drupal.org/project/drupal/releases/10.5.0
- 27drupal.org/project/update
- 28drupal.org/project/drupal/releases/10.1.1
- 29drupal.org/project/drupal/releases/10.2.1
- 30drupal.org/project/drupal/releases/10.3.1
- 31drupal.org/project/drupal/releases/10.4.1
- 32drupal.org/project/drupal/releases/10.5.1
- 33drupal.org/project/drupal/releases/10.0.0
- 34drupal.org/project/drupal/releases/10.0.1
- 35drupal.org/project/drupal/releases/9.0.0
- 36drupal.org/project/drupal/releases/8.0.0
- 37drupal.org/project/drupal/releases/7.0
- 38drupal.org/project/automatic_updates
- 39drupal.org/project/plan
- 40drupal.org/project/drupal/maintainers#release-policy
- 41drupal.org/docs/maintaining-drupal/backward-compatibility
- 42drupal.org/project/layout_builder/releases
- 43drupal.org/docs/10-1
- 44drupal.org/stats/project?project=modules
- 45drupal.org/stats
- 46drupal.org/security/release
- 47drupal.org/project/project-finder/themes
- 48drupal.org/project/project-finder/modules
- 49drupal.org/project/project-finder/distribution
- 50drupal.org/docs/develop/testing
- 51drupal.org/docs/develop/coding-standards
- 53drupal.org/translate
- 55drupal.org/project/issues
- 56drupal.org/project/drupal/issues
- 57drupal.org/project/drupal
- 58drupal.org/project/views
- 59drupal.org/project/project-finder
- 60drupal.org/project/project-finder/modules?project_type=module
- 61drupal.org/project/project-finder/themes?project_type=theme
- 62drupal.org/project/webform
- 63drupal.org/project/adminimal
- 64drupal.org/project/pathauto
- 65drupal.org/project/metatag
- 66drupal.org/project/token
- 67drupal.org/project/amp
- 68drupal.org/project/captcha
- 69drupal.org/project/backup_migrate
- 74drupal.org/sa-core-2024-002
- 75drupal.org/sa-core-2024-003
- 76drupal.org/sa-core-2024-004
- 77drupal.org/security/commitment
- 78drupal.org/security/faq
- 82drupal.org/security/secure-development
- 83drupal.org/security/security-release-process
- 84drupal.org/docs/system-requirements/php-requirements
- 85drupal.org/docs/system-requirements
- 86drupal.org/docs/release-history/drupal-11
- 87drupal.org/docs/understanding-drupal/drupal-architecture
- 88drupal.org/docs/develop/using-composer/using-composer
- 89drupal.org/project/twig
- 90drupal.org/docs/develop/using-composer/installing-drupal-with-composer
- 91drupal.org/docs/system-requirements/database-requirements
- 92drupal.org/docs/system-requirements/web-server-requirements
- 93drupal.org/project/ckeditor5
- 94drupal.org/docs/extending-drupal/configuration-management
- 95drupal.org/docs/develop/using-composer/installation-requirements
- 96drupal.org/docs/system-requirements/hardware-requirements
- 97drupal.org/docs/8/api/cache
- 98drupal.org/docs/8/api/render-api
- 99drupal.org/docs/7/cron
- 100drupal.org/docs/8/system/cron
- 101drupal.org/docs/8/api/routing
- 102drupal.org/docs/system-requirements/php-extensions
- 103drupal.org/project/jsonapi
- 104drupal.org/project/rest
- 105drupal.org/project/queue_ui
- 107drupal.org/docs/8/api/configuration-management/overview
- 108drupal.org/docs/8/core/modules/content-moderation
- 109drupal.org/project/layout_builder
- 110drupal.org/project/media
- 111drupal.org/docs/contributed-modules/media
- 112drupal.org/project/scheduler
- 113drupal.org/project/search_api
- 114drupal.org/project/search_api_solr
- 115drupal.org/docs/8/api/twig
- 116drupal.org/docs/8/api/twig/twig-extensions
- 117drupal.org/project/rest_export
- 118drupal.org/docs/8/creating-custom-modules/create-a-custom-pager
- 4payscale.com
- 5bls.gov/oes/current/oes172051.htm
- 6bls.gov/oes/current/oes151211.htm
- 7bls.gov/oes/current/oes151252.htm
- 8indeed.com/q-drupal-jobs.html
- 9linkedin.com/jobs/search/?keywords=drupal
- 10globenewswire.com
- 11gartner.com
- 16w3techs.com/technologies/overview/content_management
- 17w3techs.com/technologies/details/cm-drupal
- 52github.com/orgs/drupal/repositories
- 70github.com/drupal/drupal
- 71github.com/drupal/drupal/issues
- 72github.com/drupal/drupal/pulls
- 54localize.drupal.org/languages
- 73nvd.nist.gov/products/cpe/detail/ cpe:2.3:a:drupal:drupal
- 79nvd.nist.gov/products/cpe/search/results?keyword=drupal
- 80security.snyk.io/search?q=drupal
- 81owasp.org/Top10/
- 106symfony.com