Drupal 11.4.9 is a production-ready bugfix release that updates CKEditor 5, prevents the Navigation sidebar from rendering through BigPipe, and lets recipes add multiple CKEditor toolbar buttons.

Drupal 11.4.9 is a production-ready bugfix release that updates CKEditor 5, prevents the Navigation sidebar from rendering through BigPipe, and lets recipes add multiple CKEditor toolbar buttons.
Drupal core security updates fix a CKEditor 5 XSS vulnerability. A user who can create or edit content may target someone who later opens it through CKEditor, including privileged administrators.
Update to 10.6.17, 11.3.17, or 11.4.7.
AI Context 1.0.0-beta5 expands governed context beyond agents. Automators and CKEditor AI tools can now consume the same centrally managed context, with configurable scopes and selection rules.