Drupal 8.9.20 Actively exploited
Attackers are using a vulnerability in this version right now. Upgrade immediately.
Upgrade to 11.3.20
The lowest fixed release that is still supported.
- Known vulnerabilities
- 40 (4 critical, 2 high)
- End of life
- Yes, since 2021-11-02
- Data as of
- 2026-10-24 21:52 UTC
Vulnerabilities
- CVE-2026-9082 critical exploited fixed in 10.4.10
- CVE-2024-55638 critical fixed in 10.2.11
- CVE-2024-55637 critical fixed in 10.2.11
- CVE-2024-55636 critical fixed in 10.2.11
- CVE-2024-55634 high fixed in 10.2.11
- CVE-2025-31674 high fixed in 10.3.13
- CVE-2026-6366 medium fixed in 10.5.9
- CVE-2026-6365 medium fixed in 10.5.9
- CVE-2025-3057 medium fixed in 10.3.13
- CVE-2026-55806 medium fixed in 11.2.14
And 30 more with lower severity.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.