Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Install
To start a new Drupal project with version 10.3.12:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
19.87 MB
MD5: 1686f9f5d8d77c439ca76c045a087a52
SHA-1: 681ffc18bb4688e131622527d80d28b7d0858a44
SHA-256: d480a88ced7110918e344831f9bc2881c3dc9e9d757f5cce4475602bc4c45b27
Download zip
32.4 MB
MD5: ccb5f302e3adef46367f1254b5adb964
SHA-1: 53e5e1efd37d804b14915d1c5adfdbbee0cbf21d
SHA-256: d2a8521284c0c89b0c6798d21e56d346be1227ecde8177e06209e9a4180a070e
Release notes
This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about Drupal 10.
Drupal 10.3.x will receive security coverage until June 2025.
The Twig templating library has issued a security advisory. Drupal core is not vulnerable, but previous versions of the drupal/core-recommended package only allowed insecure versions of Twig to be installed. This patch release upgrades Twig to 3.19.0 as a public security hardening.
All changes in this release
- Issue #3503195 by alexpott, longwave, loopy1492: Twig needs updating for CVE-2025-24374
- Issue #3490710 follow-up by alexpott: Catch potential exception when calling Request::create() in PathBasedBreadcrumbBuilder
- Issue #3496438 by spokje, larowlan: [random test failure] LanguageNegotiationInfoTest::testInfoAlterations
What’s next?
- Learn how to install Drupal
- Learn how to update Drupal
- Extend Drupal to do more
- Get training
- Check out what others built
Bug fixes
Insecure
