Synced 17 Jun 2026 22:27 UTC Account

Is Drupal 8.9.20 patched?

Drupal · cycle 8.9 · end of life · Official site ↗
8.9.2040/100End of life
Health score40/100
Open issues0
Exploited now0
Cycle 8.9 EOL2021-11-02
Latest release11.3.12

Summary iPlain-English security status for Drupal 8.9.20, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Drupal 8.9.20 is part of the 8.9 release line. No known vulnerabilities affect it in our data. The 8.9 line reached end-of-life on 2021-11-02, so it no longer receives security patches. The latest supported Drupal release is 11.3.12.

Known issues affecting 8.9.20

None found for this version. ✓

Frequently asked

Is Drupal 8.9.20 patched?

Drupal 8.9.20 is end-of-life and no longer receives security patches. Move to 11.3.12.

When does Drupal 8.9 reach end-of-life?

Drupal 8.9 reached end-of-life on 2021-11-02 and no longer receives security patches.

What is the latest version of Drupal?

The latest supported Drupal release is 11.3.12.

Is Drupal 8.9.20 still receiving security updates?

No — Drupal 8.9.20 is on the 8.9 line, which reached end-of-life on 2021-11-02 and no longer receives security updates. Upgrade to 11.3.12 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Drupal's official advisory before you patch or upgrade — Drupal official site ↗