Releases for Drupal core

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a security release of the Drupal 10 series.

This release fixes a security vulnerability. Sites are urged to update immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Cross-Site Scripting - SA-CORE-2025-004

No other fixes are included.

This is a security release of the Drupal 11 series.

This release fixes a security vulnerability. Sites are urged to update immediately after reading the notes below and the security announcement:

• Drupal core - Moderately critical - Cross-Site Scripting - SA-CORE-2025-004

No other fixes are included.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a security release of the Drupal 10 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Critical - Cross-Site Scripting - SA-CORE-2025-001
• Drupal core - Moderately critical - Access Bypass - SA-CORE-2025-002
• Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-003

This release also fixes Update manager routes are not disabled anymore when allow_authorize_operations is FALSE, a public security improvement.

No other fixes are included.

This is a security release of the Drupal 11 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Critical - Cross-Site Scripting - SA-CORE-2025-001
• Drupal core - Moderately critical - Access Bypass - SA-CORE-2025-002
• Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-003

No other fixes are included.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a patch (bugfix) release of Drupal 11 and is ready for use on production sites. Learn more about Drupal 11.

This is a maintenance minor release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10 and the Drupal core release cycle.Maintenance minors are recommended for sites that prefer the minimum changes between releases.

Maintenance release of the Drupal 7 series. Includes bug fixes and small API/feature improvements only (no major, non-backwards-compatible new functionality).

No security fixes are included in this release.

Changes have been made to default.settings.php. More details in the Change Records for major changes below.

No changes have been made to .htaccess, web.config or robots.txt files in this release, so upgrading custom versions of those files is not necessary.

This is a release candidate for the next minor version (feature release) of Drupal 11. Release candidates are not supported for production sites, but they are intended for widespread testing in preparation for the upcoming stable release. More information on release candidates.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

This is a security release of the Drupal 10 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

• Drupal core - Moderately critical - Cross-Site Scripting - SA-CORE-2024-003
• Drupal core - Moderately critical - Access Bypass - SA-CORE-2024-004
• Drupal core - Less critical - Gadget chain - SA-CORE-2024-006
• Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007
• Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008

No other fixes are included.

This is a beta release for the next maintenance minor release of Drupal 10. Betas are good testing targets for developers and site builders who are comfortable reporting (and where possible, fixing) their own bugs. Beta releases are not recommended for non-technical users, nor for production websites. More information on beta releases.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

Development release package for the 10.5.x release series.

This is a security release of the Drupal 10 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement:
​

• Drupal core - Moderately critical - Improper error handling - SA-CORE-2024-002

No other fixes are included.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.

This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.