p PatchFirst

PatchFirst · Latest vulnerabilities

drupal/oauth2_server vulnerabilities

Vulnerabilities published for drupal/oauth2_server in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-31691

    Critical · CVSS 9.8EPSS 0.43%Fix available

    OAuth2 Server - Moderately critical - Access bypass - SA-CONTRIB-2025-020

    Missing Authorization vulnerability in Drupal OAuth2 Server allows Forceful Browsing.This issue affects OAuth2 Server: from 0.0.0 before 2.1.0.

    drupal/oauth2_serverPHP
    • Update to 2.1.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →