drupal/stage_file_proxy vulnerabilities (Packagist)

2 vulnerabilities.

• drupal/stage_file_proxy Packagist Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286 CVE-2026-118576 Fix available 6.5 MediumOctober 28, 2026
• drupal/stage_file_proxy Packagist Stage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035 CVE-2025-3734 Fix available 5.9 MediumApril 16, 2025