Install
To start a new Drupal project with version 11.1.3:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
18.83 MB
MD5: ebd36cc7c58726bf4e52b34e7ee68b3b
SHA-1: 0f6ac741206f77ec347a06195fa889630a451556
SHA-256: 4403234aac1f8a272cc3f16c977e4c7caeebb46bbedadb70ac28aa036e591667
Download zip
32.08 MB
MD5: b836481daa0864e713128a60ea7e782e
SHA-1: 51cbf58024fe25ea77330590d5effbcc9a441d36
SHA-256: 8d7711c14f360167ef7c4bc2ef63bca931fe93aee308caad15081adb5672d93f
Security issues fixed
Release notes
This is a security release of the Drupal 11 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
- Drupal core - Critical - Cross-Site Scripting - SA-CORE-2025-001
- Drupal core - Moderately critical - Access Bypass - SA-CORE-2025-002
- Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-003
No other fixes are included.
- Drupal 11.1.x will receive security coverage until December 2025 when Drupal 11.3.0 is released.
- Sites on Drupal 11.0.x should update immediately to Drupal 11.0.12.
- Sites on Drupal 10.4.x should update immediately to Drupal 10.4.3.
- Sites on Drupal 10.3.x should update immediately to Drupal 10.3.13.
- Drupal 10.2.x and below are end-of-life and do not receive security coverage.
Important update information
Users now need the “Administer content” permission (administer nodes) to perform certain bulk operations. Alternatively, sites can install the Granular Node Permissions module and grant more specific permissions.
What’s next?
- Learn how to install Drupal
- Learn how to update Drupal
- Extend Drupal to do more
- Get training
- Check out what others built
Security update
Insecure
