Tag1 has released the first public Drupal 7 core security update since D7 reached end-of-life.
Included in this release:
• Fix for a JavaScript prototype pollution vulnerability
• PHP 8.4 compatibility improvements
We remain the only D7ES provider that publishes patches openly.
Keeping the Drupal 7 ecosystem secure matters.
https://www.tag1.com/blog/drupal-7-extended-support-core-release/