Drupal Short URLs third party module versions 6.x and 7.x suffer from a cross site scripting vulnerability.
2338b653ebbdca2d0e36655118d648626d3e1f46b55c30aef10e28f14326d139
Drupal BrowserID third party module version 7.x suffers from a cross site request forgery vulnerability.
1f65933059e8c83ea70ceb600b4ab636ca18616eaee8a2620457c8ec1a7bfd1d