Install

Works with Drupal: ^11.4 || ^12

Using Composer to manage Drupal site dependencies

Alternative installation files

Download tar.gz 1.14 MB
MD5: 57146738ed6591f49ea254aed61cb9cb
SHA-1: 085151288f31ac3714d70f0b5eaf3f4ff3b00201
SHA-256: a8f612ef300810f963516544acb309314ffc14cbc42db114a96b9f0084ae1e65
Download zip 1.22 MB
MD5: 034890c4bd4eacfaeb242f175edff15d
SHA-1: c798f6a075d872f3361bc6fe4d884b878af0567b
SHA-256: 2cd9882a7ea0ee9f5726d7664fe19268f3f1c78588be06da9e102d85e65fa5af

Security issues fixed

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:

Release notes

- Fixed stored XSS vulnerabilities involving menu icon titles and submenu labels.
- Improved HTML filtering for translated slideshow text and author/date labels, and escaped content-type labels in developer links.
- Preserved translation support and safe HTML in slide descriptions, including links, line breaks and emphasis.
- Fixed multilingual slide links by resolving URL aliases before generating links in the current language.
- Improved caching for translated text and multilingual slide links.
- Hardened custom CSS file validation.
- Fixed #3630998: TypeError: in_array() argument #2 must be of type array, string given in preprocessAggregatorContainer().

Created by: florian
Created on: 17 Oct 2026 at 02:01 UTC
Last updated: 21 Oct 2026 at 17:35 UTC
Security update
Bug fixes
New features

Other releases