Find a vulnerability

{
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c3.2.0"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/rest_api_authentication"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c3.2.0"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-96385"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/mcdruid"
      ],
      "name": "Drew Webber (mcdruid)"
    }
  ],
  "details": "This module enables you to add an extra authentication layer to the API.\n\nThe module does not sufficiently validate authentication requirements for all API requests, which can result in an access bypass vulnerability.",
  "id": "DRUPAL-CONTRIB-2026-182",
  "modified": "2026-09-23T17:11:39.000Z",
  "published": "2026-09-23T17:10:00.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-182"
    }
  ],
  "schema_version": "1.7.0"
}