https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 22:29:33 +0000 https://db.gcve.eu/vuln/drupal-contrib-2026-287 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/oidc</p> <p>The module enables authentication via the OpenID Connect (oAuth2) protocol.</p> <p>When a new user logs in via OpenID Connect, the module tries to link the user to an existing account with the same email address. Doing so it allows to take over any existing Drupal account (except user 1) that has not yet been linked to an OpenID Connect user.</p> <p>This vulnerability is mitigated by the fact that the site must be configured to use a provider that doesn&#39;t verify the email address of the user.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/oidc</p> <p>The module enables authentication via the OpenID Connect (oAuth2) protocol.</p> <p>When a new user logs in via OpenID Connect, the module tries to link the user to an existing account with the same email address. Doing so it allows to take over any existing Drupal account (except user 1) that has not yet been linked to an OpenID Connect user.</p> <p>This vulnerability is mitigated by the fact that the site must be configured to use a provider that doesn&#39;t verify the email address of the user.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-287 https://db.gcve.eu/vuln/fkie_cve-2026-118554 <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1.</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-118554 https://db.gcve.eu/vuln/ghsa-rvvv-5cm6-2jq5 <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1.</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows Authentication Bypass. This issue affects OpenID Connect Client versions: from 0.0.0 to 2.3.1.</p> https://db.gcve.eu/vuln/ghsa-rvvv-5cm6-2jq5 https://db.gcve.eu/vuln/wid-sec-w-2026-4230 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um erweiterte Berechtigungen zu erlangen und Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und nicht näher spezifizierte Auswirkungen zu verursachen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4230