Install

Works with Drupal: ^10 || ^11

Using Composer to manage Drupal site dependencies

Alternative installation files

Download tar.gz 17.33 KB
MD5: cad190ce462131157fc3822b72750704
SHA-1: 69ee2e9153c7e0e9e9c2acf9d0d68c33960ee4db
SHA-256: b3c174223bf8692a3a5adb72bad890ab2f56284db71941b23be572d7bcc57017
Download zip 23.85 KB
MD5: 4a34d9cf6081fef117fc57b65bf4ea81
SHA-1: 2afe942ec655c4a6919c1cd4c05023251f5b418d
SHA-256: 05d06eebf97e28df130c95d7f28473ac0651730d829e023e82c84869ae310b2a
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Security issues fixed

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:

Release notes

This is a security release. See the security advisory for details.

Changes

  • Validate Redsys responses against the order being paid.

Upgrade notes

  • No database updates are needed.
  • The format of Ds_MerchantData changed. Custom code that reads it as the order ID alone needs to be updated.
Created by: facine
Created on: 11 Nov 2026 at 11:03 UTC
Last updated: 11 Nov 2026 at 17:56 UTC
Git tag 8.x-2.5
Security update

Other releases