Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.Install
To start a new Drupal project with version 10.4.3:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
20.17 MB
MD5: f1650f9ae2f56900f24c15efd7e0c81e
SHA-1: 885d8875d809317f41a637d7313893c1355f019e
SHA-256: 3ca6d6ebaa5d46818d77cecc326d55fb2e68c558f490f00365414acfc5b25ef5
Download zip
33.33 MB
MD5: 6b34f4a3e786534567e09d0057af51e3
SHA-1: 301405742a95afaaab30b6e907710ee4798d0b7e
SHA-256: 91262fd071420d8dfa809d5f02da0de683664d7538ec2995be5a26c702466c8c
Security issues fixed
Release notes
This is a security release of the Drupal 10 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
- Drupal core - Critical - Cross-Site Scripting - SA-CORE-2025-001
- Drupal core - Moderately critical - Access Bypass - SA-CORE-2025-002
- Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-003
No other fixes are included.
Which release do I choose? Security coverage information
- Drupal 10.4.x will receive security coverage until December 2025 when Drupal 10.6.0 is released.
- Sites on Drupal 10.3.x should update immediately to Drupal 10.3.11.
- Drupal 10.2.x and below are end-of-life and do not receive security coverage.
Important update information
Users now need the “Administer content” permission (administer nodes) to perform certain bulk operations. Alternatively, sites can install the Granular Node Permissions module and grant more specific permissions.
What’s next?
- Learn how to install Drupal
- Learn how to update Drupal
- Extend Drupal to do more
- Get training
- Check out what others built
Security update
Insecure
