Advisories · Technology

Drupal OpenID Connect / OAuth client.

Every CVE that names Drupal OpenID Connect / OAuth client among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-3532 CVE record

CVSS 4.2 Medium

OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027
- Drupal OpenID Connect / OAuth client
- CWE-178
Not analysed yet 26 Mar 2026
CVE-2026-3531 CVE record

CVSS 6.5 Medium

OpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-026
- Drupal OpenID Connect / OAuth client
- Authentication bypass
Not analysed yet 26 Mar 2026
CVE-2026-3530 CVE record

CVSS 4.3 Medium

OpenID Connect / OAuth client - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-025
- Drupal OpenID Connect / OAuth client
- Server-side request forgery (SSRF)
Not analysed yet 26 Mar 2026