Install
To start a new Drupal project with version 10.6.13:To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
20.5 MB
MD5: 8bb4204366b64b250df26b6a537f76e2
SHA-1: f866445a8eee9b91a525318e4ab23bcc9ae46ab5
SHA-256: a74a9b83836964d1611e47a6ad99c14a11840d28721accf76256794d27f10c76
Download zip
33.86 MB
MD5: eef21989b46400805af0fe2b7edcd2f2
SHA-1: a95c21d7bd027a50006a5a24057e5153807e9564
SHA-256: ab8ad28e9b006057739cebcf542b34de4ed042d26a739ab0231d7ccb7e6bc271
Security issues fixed
Release notes
This is a security release of the Drupal 10 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
- Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010
- Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011
- Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-012
No other fixes are included.
Which release do I choose? Security coverage information
- Sites on Drupal 10.6.x or below should update immediately to Drupal 10.6.13. Drupal 10.6.x will receive security coverage until Drupal 10 is end-of-life in December 2026.
- Sites on Drupal 11.4.x should update immediately to Drupal 11.4.4.
- Sites on Drupal 11.3.x or below should update immediately to Drupal 11.3.14.
- Drupal 11.2.x and below as well as Drupal 10.5.x and below are end-of-life and do not receive security coverage.