Upgrading Umbraco.Cms.Web.Website 9 to 10
Unknown9.5.4 → 10.8.11Security5
UnknownUpgrade verdict
DepDelta hasn't looked for the notes of 40 of 43 releases yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
- Their commits are listed with this comparison.
Must act Top 3 of 5 that need code or config changes
Target frameworks requirement changed in 10.0.0-rc1: net5.0 → net6.0.
3 packages of its own release move with it.
What you must change
Security5
Prevents disclosure of configured password requirements.
Prevents user enumeration based on the timing of login responses.
Fixes improper API access control that allowed low-privilege users access to data type functionality.
Fixes an issue where a restricted editor user could delete a media item or access unauthorized content.
Updates the ImageSharp dependency to a patched version following CVE-2025-27598.
ImageSharp