—
DRUPAL-CONTRIB-2026-124
Details
This module enables you to add extra layer of verification for user registration.
The module doesn't sufficiently validate user-supplied input resulting in an account takeover vulnerability.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/otp_verification
Introduced in:
0Fixed in: 2.4.0Upgrade drupal/otp_verification to 2.4.0 or newer (ecosystem packagist:https://packages.drupal.org/8).