—
DRUPAL-CORE-2026-003
Quick fix
DRUPAL-CORE-2026-003 — drupal/core: upgrade to the fixed version with the command below.
composer require drupal/core:^11.3.7Details
Drupal 11.3 comes with support for completing entity suggestions whilst adding a link to CKEditor 5.
The suggestions aren't sufficiently sanitized and a malicious user could trigger a stored cross site scripting attack against another user.
Are you affected?
Enter the version of the package you're using.