drupal/otp_verification vulnerabilities (Packagist)

2 vulnerabilities.

• drupal/otp_verification Packagist Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125 CVE-2026-84924 Fix available 5.4 MediumSeptember 2, 2026
• drupal/otp_verification Packagist Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124 CVE-2026-84923 Fix available 6.5 MediumSeptember 2, 2026