Skip to content
OpenAdvisories

Package · Packagist

drupal/email_tfa

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.4
    CVE-2025-12760

    Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-115

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6.

    Drupal Email TFA drupal/email_tfa Packagist
  • High 8.8
    CVE-2025-31676

    Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-001

    Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3.

    Drupal Email TFA drupal/email_tfa Packagist