Install
Works with Drupal: ^10.3 || ^11Using Composer to manage Drupal site dependencies
Release notes
Alternative installation files
Download tar.gz
998 KB
MD5: de4bb1e488f4cfbfc1c3c5e213f541ed
SHA-1: 3d6da0a5fb44b573547c4ba855c4ce719c8c148a
SHA-256: 6940f96d1226e594c3dc0ccf31cbbfd2288cb591a4f76907ab38c7a3a752b244
Download zip
1.91 MB
MD5: d70e214d6b31689cc80c9d57ee2b7b2e
SHA-1: 94e00c20f6a8133a30a613b54cc5239eaea77a5e
SHA-256: 090322a7166cb1cb80f529e547210329b5b0311f9b3967b9542707764048a0b9
Security issues fixed
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:
- Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254
- Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255
- Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256
- Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257
- Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258
- Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259
