contao/comments-bundle vulnerabilities (Packagist)

2 vulnerabilities.

• contao/comments-bundle Packagist Contao: Cross-site scripting in the comments bundle CVE-2026-107845 Fix available 9.3 CriticalOctober 9, 2026
• contao/comments-bundle Packagist Contao has insufficient BBCode sanitizer CVE-2024-28234 Fix available 4.3 MediumApril 9, 2024