drupal/openid_connect vulnerabilities (Packagist)

4 vulnerabilities.

• drupal/openid_connect Packagist OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027 CVE-2026-3532 Fix available 4.2 MediumMarch 4, 2026
• drupal/openid_connect Packagist OpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-026 CVE-2026-3531 Fix available 6.5 MediumMarch 4, 2026
• drupal/openid_connect Packagist OpenID Connect / OAuth client - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-025 CVE-2026-3530 Fix available 4.3 MediumMarch 4, 2026
• drupal/openid_connect Packagist This module allows users to authenticate against an Oauth 2.0 / OpenID Connect identity provider to login to your Drupal site. The module doesn't sufficiently protect against unauthorized local access… DRUPAL-CONTRIB-2021-014 Fix available No scoreJune 2, 2021