Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Drupal

Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242

SA-CONTRIB-2026-242 Oct 21, 2026 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-242. 5 reporter(s), 5 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-contrib-2026-242
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

7 lines
Showing 1–7 of 7
CVE-2026-114542 BR2026-0000-031253 unclaimed
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Credited as Jonathan Shaw (jonathanshaw)
CVE-2026-114542 BR2026-0000-031254 unclaimed
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Credited as Alexander Varwijk (kingdutch)
CVE-2026-114542 BR2026-0000-031255 unclaimed
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Credited as Mingsong (mingsong)
CVE-2026-114542 BR2026-0000-031256 unclaimed
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Credited as Stephan Huber (stmh)
CVE-2026-114542 BR2026-0000-031257 unclaimed
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Credited as Trevor Bradley (trevorbradley)
CVE-2026-114542 BR2026-0000-031258 unclaimed
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Credited as Bojan Bogdanovic (bojan_dev)
CVE-2026-114542 BR2026-0000-031259 unclaimed
Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
Credited as Mingsong (mingsong), provisional member of the Drupal Security Team