drupal/commerce_shipping vulnerabilities (Packagist)

2 vulnerabilities.

• drupal/commerce_shipping Packagist Commerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262 CVE-2026-118557 Fix available 2.7 LowOctober 28, 2026
• drupal/commerce_shipping Packagist Commerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261 CVE-2026-118556 Fix available 6.5 MediumOctober 28, 2026