Install
To start a new Drupal project with version 10.6.19:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
20.63 MB
MD5: 265396f925713a8bec7785084d1b7be5
SHA-1: c009921f6cf854103fa7a3342a813dd4b34a76b9
SHA-256: 5c1a543c1fb2e3add5c4d95971ac21f64d934d35cd89ed3f1fa4398ad7914682
Download zip
34.02 MB
MD5: 990594e1911b46dc7cf7ea0ce4f9f1aa
SHA-1: b69ca473eec2a9df76774e66f92f85ce7c14243b
SHA-256: df5534ac1e52c2a24a4453da4c64f7f01c4fbccf07db8ab0bd17cd77939c57ac
Security issues fixed
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:
Release notes
This is a security release of the Drupal 10 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
- Drupal core - Critical - Remote code execution - SA-CORE-2026-014
- Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015
- Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016
Which release do I choose? Security coverage information
- Sites on Drupal 10.6.x or below should update immediately to Drupal 10.6.19. Drupal 10.6.x will receive security coverage until Drupal 10 is end-of-life in December 2026.
- Sites on Drupal 11.4.x should update immediately to Drupal 11.4.10.
- Sites on Drupal 11.3.x or below should update immediately to Drupal 11.3.19.
- Drupal 11.2.x and below as well as Drupal 10.5.x and below are end-of-life and do not receive security coverage.
Other changes in this release
This release also updates CKEditor to version 47.6.3-drupal.1, which fixes a bug introduced in SA-CORE-2026-013.