drupal 11.3.7 | Drupal.org
Skip to search
Can we use first and third party cookies and web beacons to
understand our audience, and to tailor promotions you see
drupal 11.3.7
Try a hosted Drupal demo
Install
To start a new Drupal project with version 11.3.7:
To update your site and all dependencies to the latest version of Drupal:
To update your site to this specific release:
Pinning to a specific release may make it more challenging to update your site in future, see
composer documentation for managing pinned versions
Using Composer to manage Drupal site dependencies
Downloads
Download tar.gz
19.95 MB
MD5:
7c313cef630521f610c12a00dd4df843
SHA-1:
617fb0f5ad59d4a0fb80ec804e2c7cd47ed98e2e
SHA-256:
b58654f6fbf3503a090f79dbf778e042929cf3d7e2cde6cb1091bcc60fcd48b6
Download zip
34.21 MB
MD5:
e45d6b054ad8d03cb8309bd6225080d4
SHA-1:
a0044e629382d656576d504c964a781bfb5c1b70
SHA-256:
80285da9c6b0d81201a544f4d1ac96a312b9862e67f60b27c263da4e0d27cd11
Security issues fixed
Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003
Release notes
This is a
security release
of the Drupal 11 series.
Note:
This release introduces a regression for configuration import that could result in data loss in certain scenarios.
Sites should update directly to
Drupal 11.3.8
instead of this release.
This release fixes
security vulnerabilities
. Sites are
urged to update immediately
after reading the notes below and the security announcements:
Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001
Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003
Important update information
This release updates the pinned versions of Composer to 2.9.7 for several
Composer security fixes
that were released today. Drupal does not expose these vulnerabilities, but the update is included as a hardening for other applications that may extend the library directly.
Which release do I choose? Security coverage information
Drupal 11.3.x will receive security coverage
until December 2026 when Drupal 11.5.0 is released
Sites on Drupal 11.2.x should update immediately to Drupal 11.2.11.
Sites on Drupal 10.6.x should update immediately to Drupal 10.6.7.
Sites on Drupal 10.5.x should update immediately to Drupal 10.5.9.
Drupal 11.1.x, Drupal 10.4.x, and below are end-of-life and do not receive security coverage.
No other fixes are included.
Known issues
#3584812: ConfigInstaller isSyncing does not persist to hook_modules_installed() when multiple modules are installed
What’s next?
Learn how to install Drupal
Learn how to update Drupal
Extend Drupal to do more
Get training
Check out what others built
Created by:
xjm
Created on: 15 Apr 2026 at 17:51 UTC
11.3.7
Insecure
Security update
Other releases
11.3.8
20 April 2026
11.2.11
15 April 2026
11.3.7
15 April 2026
11.3.6
8 April 2026
11.3.5
6 March 2026
11.3.4
5 March 2026
11.3.3
5 February 2026
11.3.2
8 January 2026
11.3.1
18 December 2025
11.3.0
17 December 2025
11.3.0-rc2
15 December 2025
11.2.10
10 December 2025
11.3.0-rc1
4 December 2025
11.2.9
4 December 2025
11.3.0-beta1
25 November 2025
11.1.9
12 November 2025
11.2.8
12 November 2025
11.2.7
6 November 2025
11.3.0-alpha1
6 November 2025
11.2.6
6 November 2025
11.3.x-dev
24 October 2025
11.2.5
2 October 2025
11.2.4
4 September 2025
11.2.3
7 August 2025
11.2.2
26 June 2025
11.2.1
25 June 2025
11.2.0
19 June 2025
11.2.0-rc2
13 June 2025
11.2.0-rc1
11 June 2025
11.1.8
5 June 2025
11.2.0-beta1
23 May 2025
11.2.x-dev
13 May 2025
11.2.0-alpha1
12 May 2025
11.1.7
8 May 2025
11.1.6
2 April 2025
11.0.13
19 March 2025
11.1.5
19 March 2025
11.1.4
5 March 2025
11.0.12
19 February 2025
11.1.3
19 February 2025
11.0.11
5 February 2025
11.1.2
5 February 2025
11.0.10
6 January 2025
11.1.1
6 January 2025
11.1.0
16 December 2024
11.1.0-rc1
2 December 2024
11.0.9
22 November 2024
11.0.8
20 November 2024
11.1.0-beta1
15 November 2024
11.0.7
12 November 2024
11.0.6
7 November 2024
11.1.x-dev
31 October 2024
11.0.5
3 October 2024
11.0.4
12 September 2024
11.0.3
11 September 2024
11.0.2
5 September 2024
11.0.1
8 August 2024
11.0.0
2 August 2024
11.0.0-rc1
11 July 2024
11.0.0-beta1
17 May 2024
11.0.x-dev
4 May 2024
11.0.0-alpha1
3 May 2024
11.x-dev
9 May 2023
View usage statistics for this release
Infrastructure management for Drupal.org provided by
Need a Drupal 7 extended support partner? Consider Tag1.
News items
News
Planet Drupal
Social media
Sign up for Drupal news
Security advisories
Jobs
Our community
Community
Services
Training
Hosting
Contributor guide
Groups & meetups
DrupalCon
Code of conduct
Documentation
Documentation
Drupal Guide
Drupal User Guide
Developer docs
API.Drupal.org
Drupal code base
Download & Extend
Drupal core
Modules
Themes
Distributions
Governance of community
About
Web accessibility
Drupal Association
About Drupal.org
Drupal is a
registered trademark
of
Dries Buytaert