Skip to content
OpenAdvisories

Package · Packagist

drupal/openid_connect

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.2
    CVE-2026-3532

    OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027

    Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

    Drupal OpenID Connect / OAuth client drupal/openid_connect Packagist
  • Medium 6.5
    CVE-2026-3531

    OpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-026

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect / OAuth client allows Authentication Bypass.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

    Drupal OpenID Connect / OAuth client drupal/openid_connect Packagist
  • Medium 4.3
    CVE-2026-3530

    OpenID Connect / OAuth client - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-025

    Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect / OAuth client: from 0.0.0 before 1.5.0.

    Drupal OpenID Connect / OAuth client drupal/openid_connect Packagist
  • Unscored —
    DRUPAL-CONTRIB-2021-014

    This module allows users to authenticate against an Oauth 2.0 / OpenID Connect identity provider to login to your Drupa…

    drupal/openid_connect Packagist