Install
To start a new Drupal project with version 11.3.19:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
20.15 MB
MD5: 50fa8c78ccda65f405c309fa8a9f5a25
SHA-1: 4e5fa522805826cb399769076175cc2b665c5980
SHA-256: cea13a3b7a9dc25178a640c3e522b78a0c37dd37f2059b46aa03fbed15c97b72
Download zip
34.52 MB
MD5: 212cca555e0a991942251b19b08c9cab
SHA-1: 7fd49bf8e43804f20c9b12996b9bbec92d2c1634
SHA-256: 27ddeaa28afd930289b3dcbd0defadd29dd22551dc890ec3b6e4c26d558d7ff1
Security issues fixed
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:
Release notes
This is a security release of the Drupal 11 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
- Drupal core - Critical - Remote code execution - SA-CORE-2026-014
- Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015
- Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-016
Which release do I choose? Security coverage information
- Sites on Drupal 11.3.x should update immediately to Drupal 11.3.19. Drupal 11.3.x will receive security coverage until December 2026 when Drupal 11.5.0 is released.
- Sites on Drupal 11.4.x should update immediately to Drupal 11.4.10.
- Sites on Drupal 10.6.x or below should update immediately to Drupal 10.6.19.
- Drupal 11.2.x and below as well as Drupal 10.5.x and below are end-of-life and do not receive security coverage.
Other changes in this release
This release also updates CKEditor to version 47.6.3-drupal.1, which fixes a bug introduced in SA-CORE-2026-013.