Drupal Oauth2 Token Manager vulnerabilities

• drupal oauth2 token manager OAuth2 Token Manager - Critical - Access bypass - SA-CONTRIB-2026-290 CVE-2026-118573 Fix available 4.8 MediumOctober 28, 2026