Product · Drupal

OAuth2 Token Manager

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.8

CVE-2026-118573

OAuth2 Token Manager - Critical - Access bypass - SA-CONTRIB-2026-290

Missing Authorization vulnerability in Drupal OAuth2 Token Manager allows Forceful Browsing. This issue affects OAuth2 Token Manager versions: from 0.0.0 to 1.2.0.

Drupal OAuth2 Token Manager drupal/oauth2_token_manager Packagist

Oct 30, 2026