Known Vulnerabilities for Openid by Drupal
Listed below are 1 of the newest known vulnerabilities associated with "Openid" by "Drupal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59096 json | Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/openid-configuration document from ... | Not Provided | 2026-07-02 | 2026-07-14 |
| CVE-2026-53661 json | Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity ... | Not Provided | 2026-06-11 | 2026-06-11 |
| CVE-2026-49757 json | Authentication Bypass by Spoofing vulnerability in team-alembic AshAuthentication allows account takeover of local users via ... | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-49229 json | Actual is a local-first personal finance app. Prior to 26.6.0, in OpenID multi-user mode, disabling a user only blocks future... | Not Provided | 2026-07-07 | 2026-07-09 |
| CVE-2026-46700 json | Actual is a local-first personal finance tool. Prior to 26.6.0, the GET /secret/:name endpoint in @actual-app/sync-server che... | Not Provided | 2026-07-07 | 2026-07-08 |
| CVE-2026-46412 json | @beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS (Identity Server) with OpenID Connect support. Bet... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-44681 json | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open... | Not Provided | 2026-05-27 | 2026-06-02 |
| CVE-2026-44394 json | An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone federated token rescoping mechanism does not propag... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-44087 json | Insufficient Verification of Data Authenticity vulnerability in Apache APISIX. The openid-connect plugin under default confi... | Not Provided | 2026-06-19 | 2026-06-22 |
| CVE-2026-42604 json | Actual is a local-first personal finance tool. The `POST /openid/config` endpoint in Actual Budget's sync-server versions <= ... | Not Provided | 2026-06-12 | 2026-06-15 |