@apostrophecms Form vulnerabilities

• @apostrophecms form, login-hcaptcha, login-recaptcha +1 more +3 more ApostropheCMS: CAPTCHA response token not URL-encoded CVE-2026-113667 Fix available 5.3 MediumOctober 20, 2026
• @apostrophecms form, apostrophecms apostrophe +1 more ApostropheCMS: Unauthenticated unbounded multipart upload → disk-exhaustion DoS CVE-2026-113656 Fix available 5.3 MediumOctober 20, 2026