drupal/simple_oauth vulnerabilities (Packagist)

4 vulnerabilities.

• drupal/simple_oauth Packagist This module introduces an OAuth 2.0 authorization server, which can be configured to protect your Drupal instance with access tokens, or allow clients to request new access tokens and refresh them. Th… CVE-2026-122058 Fix available No scoreNovember 4, 2026
• drupal/simple_oauth Packagist Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242 CVE-2026-114542 Fix available 5.4 MediumOctober 21, 2026
• drupal/simple_oauth Packagist Simple OAuth (OAuth2) & OpenID Connect - Critical - Access bypass - SA-CONTRIB-2025-114 CVE-2025-12466 Fix available 7.5 HighOctober 29, 2025
• drupal/simple_oauth Packagist This module enables you to implement OAuth 2.0 authentication for Drupal. The module doesn't sufficiently verify client secret keys for "confidential" OAuth 2.0 clients when using certain grant types.… DRUPAL-CONTRIB-2022-002 Fix available No scoreJanuary 5, 2022