This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. Learn more about the latest version of Drupal.
Drupal 10.5.x will receive security support until June 2026. Drupal 10.4.x will continue to receive security support until December 2025.
Drupal 10.3.x security support has ended. Sites on any Drupal version prior to 10.4.x should upgrade to a supported release as soon as possible.
Important update information
Symfony packages were previously updated in Drupal 10.5.6 as a security hardening for CVE-2025-64500, but Drupal 10.5.7 accidentally downgraded these packages. This release again updates the packages. No other changes are included.
While Drupal does not expose the above vulnerability, it is still recommended that sites using Drupal 10.5.7 either update to 10.5.8 or ensure that the symfony/http-foundation package is on at least version 6.4.29.