diff --git a/wp-admin/includes/class-wp-media-list-table.php b/wp-admin/includes/class-wp-media-list-table.php
index 1943a5966f..9b17bd95bd 100644
--- a/wp-admin/includes/class-wp-media-list-table.php
+++ b/wp-admin/includes/class-wp-media-list-table.php
@@ -852,7 +852,7 @@ class WP_Media_List_Table extends WP_List_Table {
 
 				$actions['download'] = sprintf(
 					'<a href="%s" aria-label="%s" download>%s</a>',
-					wp_get_attachment_url( $post->ID ),
+					esc_url( wp_get_attachment_url( $post->ID ) ),
 					/* translators: %s: Attachment title. */
 					esc_attr( sprintf( __( 'Download &#8220;%s&#8221;' ), $att_title ) ),
 					__( 'Download file' )
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 6019736e92..75c0fc0155 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -16,7 +16,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '6.2-alpha-55220';
+$wp_version = '6.2-alpha-55221';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.