PHP CVE-2026-109618 and CVE-2026-109619?

Hi, Is any part of Squidex CMS including any part if its supply chain vulnerable to the PHP CVEs above (that are all over the news at the moment)?

We are trying to ascertain our exposure across a wide range of services and dependencies.

Thanks
Rich