drupal/captcha vulnerabilities (Packagist)

2 vulnerabilities.

• drupal/captcha Packagist CAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281 CVE-2026-118582 Fix available 7.3 HighOctober 28, 2026
• drupal/captcha Packagist CAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-015 CVE-2026-3214 Fix available 6.5 MediumFebruary 25, 2026