Download Latest Version 9.5.2 source code.zip (46.6 MB)
Email in envelope

Get an email when there's a new version of concretecms

Home / 9.5.2
Name Modified Size InfoDownloads / Week
Parent folder
concrete-cms-9.5.2-remote-updater.zip 2026-06-03 77.5 MB
0
concrete-cms-9.5.2.zip 2026-06-03 76.9 MB
0
9.5.2 source code.tar.gz 2026-06-03 40.3 MB
1 1 weekly downloads
9.5.2 source code.zip 2026-06-03 46.6 MB
0
README.md 2026-06-03 1.5 kB
0
Totals: 5 Items   241.3 MB 1

Behavioral Improvements

  • Page attributes are now grouped by set in the Composer Add Form Control dialog.

Bug Fixes

  • Advanced board templates that used the $summaryObject variable within them should now work again.
  • Restored old behavior where if a block used a custom template, but that custom template actually didn’t exist in the filesystem, the block would not render anything. Now it renders the default view (as it used to.)
  • Fixed: In the date output of a calendar event there was a closing anchor tag which appears to be out of place (thanks danklassen)

Developer Updates

  • Added on_package_test_for_uninstall, on_before_package_uninstall and on_after_package_uninstall events.

Security Fixes

  • Updated third party composer libraries to close out new security vulnerabilities in our upstream dependencies like twig/twig, symfony/yaml, and others.

  • add allowed_classes to unserialize() in Permission, Cache, and Search to prevent PHP Object Injection (thanks XananasX7 for reporting and providing a pull request). CVE-2026-10721 was created for this vulnerability

  • security: add allowed_classes to unserialize() in Form blocks, and File/Set to prevent PHP Object Injection (thanks XananasX7 for providing a pull request and also Sanjorn Keeratirungsan for reporting H1 3756743). CVE-2026-7888 was created for this vulnerability

Source: README.md, updated 2026-06-03