https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T00:04:37.735961+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-020 DRUPAL-CONTRIB-2025-020 2026-10-09T00:04:37.789225+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/oauth2_server

Provides OAuth2 server functionality based on the oauth2-server-php library.

The module does not consistently enforce admin configurations allowing users on a disabled server to still authenticate.

 https://cve.radiocsirt.org/vuln/euvd-2026-235659 EUVD-2026-235659 2026-10-09T00:04:37.789298+00:00 EUVD-2026-235659 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31691 fkie_cve-2025-31691 2026-10-09T00:04:37.789317+00:00

Missing Authorization vulnerability in Drupal OAuth2 Server allows Forceful Browsing.This issue affects OAuth2 Server: from 0.0.0 before 2.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-4f8q-mwgc-3mwc GHSA-4f8q-mwgc-3mwc — Drupal OAuth2 Server Missing Authorization vulnerability 2026-10-09T00:04:37.789344+00:00

Affected: Packagist: drupal/oauth2_server

Missing Authorization vulnerability in Drupal OAuth2 Server allows Forceful Browsing. This issue affects OAuth2 Server: from 0.0.0 before 2.1.0.