Openid Connect Oauth Client (Drupal) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-26. Vendor: Drupal.

CVEs of Openid Connect Oauth Client

• CVE-2026-3532 - CVSS 4.2 (medium), 2026-03-26: Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect /…
• CVE-2026-3531 - CVSS 6.5 (medium), 2026-03-26: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect / OAuth client allows Authentication Bypass.This issue affects…
• CVE-2026-3530 - CVSS 4.3 (medium), 2026-03-26: Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect…