—

DRUPAL-CONTRIB-2026-148

Details

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider.

The module contains embedded credentials used by the functionality provided by the module.

Under certain circumstances, these credentials could allow information about associated services to be disclosed.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/miniorange_saml

Introduced in: 0Fixed in: 3.2.0

Upgrade drupal/miniorange_saml to 3.2.0 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2026-148[WEB]