drupal/auth_login_plus vulnerabilities (Packagist)

2 vulnerabilities.

• drupal/auth_login_plus Packagist Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201 CVE-2026-107261 Fix available 4.2 MediumOctober 7, 2026
• drupal/auth_login_plus Packagist Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197 CVE-2026-107254 Fix available 4.8 MediumOctober 7, 2026