Install
To start a new Drupal project with version 10.5.9:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
20.32 MB
MD5: e31eceb519a20413b3776a878d9728a6
SHA-1: aea3938c7351dabc5328cf19757dd112d6bc0cf2
SHA-256: 23156f4eb2115b1e7c53900b4df0c1beac31b53f36354fa7971da65a9de6a2ac
Download zip
33.59 MB
MD5: 7076b17a7b4618e45d8022dcce10f97d
SHA-1: 76b39d1396ddb76893fe0fadab6b3b7bc35c4ec9
SHA-256: f29a0ac8df4066867098941035078818a1a4d24ff79b88f077332677152d94ce
Security issues fixed
Release notes
This is a security release of the Drupal 10 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
- Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
- Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Important update information
-
This release updates the pinned versions of Composer to 2.9.7 for several Composer security fixes that were released today. Drupal does not expose these vulnerabilities, but the update is included as a hardening for other applications that may extend the library directly.
No other fixes are included.
Which release do I choose? Security coverage information
- Drupal 10.5.x will receive security coverage until June 2026.
- Sites on Drupal 11.3.x should update immediately to Drupal 11.3.7.
- Sites on Drupal 11.2.x should update immediately to Drupal 11.2.11.
- Sites on Drupal 10.6.x should update immediately to Drupal 10.6.7.
What’s next?
- Learn how to install Drupal
- Learn how to update Drupal
- Extend Drupal to do more
- Get training
- Check out what others built
Security update
