CVE Intelligence

Drupal Simple OAuth (OAuth2) & OpenID Connect vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Drupal Simple OAuth (OAuth2) & OpenID Connect: 1 record(s), with affected versions and fixes.

CVE-2025-12466 High · 7.5 CWE-288 Oct 29, 2025
Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth (OAuth2) & OpenID Connect: from 6.0.0 before 6.0.7.