CVE Intelligence

Simple Oauth Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Simple Oauth Project products: 1 record(s), with severity, exploitation and fixes.

Simple Oauth 1

Exploited only (KEV) →

CVE-2025-12466 High · 7.5 CWE-288 Oct 29, 2025
Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth (OAuth2) & OpenID Connect: from 6.0.0 before 6.0.7.