Package · Packagist

drupal/simple_oauth

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

Unscored —

CVE-2026-122058

This module introduces an OAuth 2.0 authorization server, which can be configured to protect your Drupal instance with …

drupal/simple_oauth Packagist

Nov 4, 2026
Medium 5.4

CVE-2026-114542

Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect version…

Drupal Simple OAuth (OAuth2) & OpenID Connect drupal/simple_oauth Packagist

Oct 30, 2026
High 7.5

CVE-2025-12466

Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth (OAuth2) & OpenID Connect: from 6.0.0 before 6.0.7.

Drupal Simple OAuth (OAuth2) & OpenID Connect drupal/simple_oauth Packagist

Oct 29, 2025
Unscored —

DRUPAL-CONTRIB-2022-002

This module enables you to implement OAuth 2.0 authentication for Drupal. The module doesn't sufficiently verify client…

drupal/simple_oauth Packagist

Jan 5, 2022