Vulnerability GHSA-jqmq-fpwv-p925
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
11 months ago
October 30, 2025 at 12:31 AM UTC
Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass
>=6.0.0 <6.0.7
>=6.0.0 <6.0.7
Summary
Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass
Details
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass. This issue affects Simple OAuth (OAuth2) & OpenID Connect: from 6.0.0 before 6.0.7.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 hours ago
No summary available
>=6.1.0 <6.1.3 DRUPAL-CONTRIB-2026-242
>=6.1.0 <6.1.3 DRUPAL-CONTRIB-2026-242
Unknown
11 months ago
No summary available
>=6.0.0 <6.0.7 DRUPAL-CONTRIB-2025-114
>=6.0.0 <6.0.7 DRUPAL-CONTRIB-2025-114
Unknown
4 years ago
No summary available
<4.6.0, >=5.0.0 <5.0.6 DRUPAL-CONTRIB-2022-002
<4.6.0, >=5.0.0 <5.0.6 DRUPAL-CONTRIB-2022-002
Impacted packages
Timeline
Published
11 months ago
October 30, 2025 at 12:31 AM UTC
Last Modified
10 months ago
December 10, 2025 at 11:41 PM UTC