Drupal Block Ajax vulnerabilities

• drupal block ajax Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192 CVE-2026-107249 Fix available 9.8 CriticalOctober 7, 2026