—
DRUPAL-CONTRIB-2026-182
Details
This module enables you to add an extra authentication layer to the API.
The module does not sufficiently validate authentication requirements for all API requests, which can result in an access bypass vulnerability.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/rest_api_authentication
Introduced in:
0Fixed in: 3.2.0Upgrade drupal/rest_api_authentication to 3.2.0 or newer (ecosystem packagist:https://packages.drupal.org/8).