—
DRUPAL-CONTRIB-2025-020
Details
Provides OAuth2 server functionality based on the oauth2-server-php library.
The module does not consistently enforce admin configurations allowing users on a disabled server to still authenticate.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/oauth2_server
Introduced in:
0Fixed in: 2.1.0Upgrade drupal/oauth2_server to 2.1.0 or newer (ecosystem packagist:https://packages.drupal.org/8).