Install
Works with Drupal: ^9.3 || ^10Using Composer to manage Drupal site dependencies
Release notes
Alternative installation files
Download tar.gz
883.49 KB
MD5: 3cf7e6d7dde0882a55fbbaab8ae37d92
SHA-1: 89c0a04416cf015c2ce354d49e2a67c3daf96795
SHA-256: 7cf5bb824fe50c757cfa8ad86eed1dd247d4be560a11cb508f5e07e0027ffffb
Download zip
1.72 MB
MD5: 6c4f7a5e37d341a8047f77de5e4417af
SHA-1: c28a2e6698558a14de9bbc6a67cc0ffb845cb3f0
SHA-256: 4ecc986401443b9c5416bf8b2861b259ad38a0652a12ee4bdbe0b5dc6fa31cb9
Security issues fixed
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the following security announcements and release notes:
- Commerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254
- Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255
- Commerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256
- Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257
- Commerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258
- Commerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259