drupal/cas_server vulnerabilities (Packagist)

2 vulnerabilities.

• drupal/cas_server Packagist Central Authentication System (CAS) Server - Moderately critical - Open redirect - SA-CONTRIB-2026-135 CVE-2026-87937 Fix available 6.5 MediumSeptember 9, 2026
• drupal/cas_server Packagist Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007 CVE-2026-1554 Fix available 4.2 MediumJanuary 28, 2026