Install

To start a new Drupal project with version 10.4.10:

To update your site and all dependencies to the latest version of Drupal:

To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions

Using Composer to manage Drupal site dependencies

Downloads

Download tar.gz 20.2 MB
MD5: d738483d473540123f2c6de03354b206
SHA-1: c4035521edf0e2836d670820524a09258cb145df
SHA-256: 65e75a471aca120d452503789ea0366c2e170282e223fc00b5a872024d296079
Download zip 33.41 MB
MD5: 231caf527fa0cd537137b6548f2fb59b
SHA-1: febe296c586fa0595a6fc5a24a3ba5ebecac9a7c
SHA-256: 6daa31283a6b73f7d6719be6a5a4b8ee0d10c818473614661746b44d7eaad8c9

Security issues fixed

Release notes

This is a security release of the Drupal 10 series.

This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:

No other fixes are included.

Important update information

Symfony and Twig have both published security releases today fixing multiple CVEs affecting Drupal. These dependencies can be updated via Composer.

If you currently use the drupal/core-recommended metapackage, you will need to replace it with drupal/core to be able to update these packages to new minor versions:

composer require drupal/core:^10.4.10 --no-update
composer remove drupal/core-recommended --no-update
composer update drupal/core* -W

Known issues

  • Drupal 10.4 is end-of-life and does not receive security coverage. This release is being provided outside our normal policy due to the severity of the above security announcement.

  • Drupal 10.4 includes other previously-disclosed security vulnerabilities that are not fixed by this release. You should plan to update to Drupal 10.6 or higher as soon as possible.

What’s next?

  1. Learn how to install Drupal
  2. Learn how to update Drupal
  3. Extend Drupal to do more
  4. Get training
  5. Check out what others built
Created by: longwave
Created on: 20 May 2026 at 17:14 UTC
Last updated: 20 May 2026 at 19:43 UTC
Security update
Insecure
Unsupported

Other releases