Vulnerabilities

TI-2026-03043 CVE-2026-3532 · GHSA-g8fg-x943-8cvw

OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027

LOW 19

Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00138 Published 2026-03-26 Fixed in 1.5.0 CWE-178

TI-2026-03042 CVE-2026-3531 · GHSA-f2x9-px9q-jxw2

OpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-026

LOW 28

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect / OAuth client allows Authentication Bypass.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00255 Published 2026-03-26 Fixed in 1.5.0 CWE-288

TI-2026-03041 CVE-2026-3530 · GHSA-2mq5-fr5w-rr29

Server-side request forgery in Drupal OpenID Connect / OAuth client

LOW 19

Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00168 Published 2026-03-26 Fixed in 1.5.0 CWE-918

Vulnerabilities

Filters

OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027

OpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-026

Server-side request forgery in Drupal OpenID Connect / OAuth client