Simple OAuth (OAuth2) & OpenID Connect vulnerabilities

1 known vulnerability in Simple OAuth (OAuth2) & OpenID Connect from Drupal. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Simple OAuth (OAuth2) & OpenID Connect: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-12466Oct 30, 2025Drupal

  Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Authentication Bypass.This issue affects Simple OAuth (OAuth2) & OpenID Connect: from 6.0.0 before 6.0.7.