Credentials disclosure in the crawler

PKSA-8pr1-zw9p-tzyx CVE-2026-55824

Affected version: >=4.13.0,<5.3.47|>=5.4.0,<5.7.7

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] Contao discloses sensitive information in the front end search index

PKSA-34p6-239r-z7w2 CVE-2025-57756 GHSA-2xmj-8wmq-7475

Affected version: >=5.4.0-RC1,<5.6.1|>=5.0.0-RC1,<5.3.38|>=4.9.14,<4.13.56

Reported by:
GitHub