PrestaShop 9.1.3 Now Available

PrestaShop is excited to announce the release of version 9.1.3, a crucial security maintenance update for the 9.1 branch. This version incorporates the latest patch updates for two vital upstream dependencies: Symfony and Twig, following their coordinated security advisories published on May 20, 2026.

Key Updates in 9.1.3

The 9.1.3 release primarily focuses on dependency updates:

• Symfony components have been upgraded from 6.4.38 to 6.4.40, addressing advisories related to components such as symfony/cache, symfony/dom-crawler, and more.
• Twig has been updated from 3.20.0 to 3.26.0, which includes the latest fixes for the Twig sandbox and template engine.

Importantly, there are no changes to the PrestaShop application code, ensuring that there are no behavioral or breaking changes. After updating, running composer audit will show no known security advisories on the dependencies. The practical impact of these advisories on a typical PrestaShop store is expected to be minimal, as the affected components are rarely exposed to untrusted input in default configurations. However, custom or third-party modules that handle user-supplied data may carry some risk.

Important Note on PrestaShop 8

For users still on PrestaShop 8, which is built on Symfony 4.4 (now at end-of-life), we will not backport these specific patches. The risk analysis for version 8.x mirrors that of 9.x, and while we expect limited risk for most shops, we recommend reaching out to a PrestaShop expert agency for a tailored review of your installation. If any vulnerabilities are assessed to have critical impacts on PS8 stores, we will reconsider our approach accordingly.

Download PrestaShop 9.1.3

You can download the Classic version of PrestaShop 9.1.3 from the official website. This version includes essential PrestaShop SA modules such as PrestaShop Checkout, PrestaShop Account, and more.

Download PrestaShop 9.1.3 now!

If you prefer a custom ZIP without PrestaShop SA modules, instructions for building your own installer can be found in the PrestaShop Release Creation Tool readme.

Update Process

Given that version 9.1.3 only updates dependencies, the update process is low-risk. We recommend applying it to any shop running 9.1.x. Always ensure you create a full backup of your shop before proceeding with the update.

Updating to the latest PrestaShop 9.1.x version is straightforward with the Update Assistant. This tool simplifies the update process, ensuring your shop remains current with minimal effort. If you encounter any issues during the update that are not related to third-party modules or custom modifications, please submit a bug report.

Acknowledgments

We extend our gratitude to the Symfony and Twig maintainers for their ongoing efforts in keeping these foundational libraries secure. Stay informed about the latest updates and releases by subscribing to our newsletter and following our official channels.