Packagist/drupal/alogin CVE-2025-31681: critical 9.8, EPSS 0.43%

This module allows a site to setup two factor authentication via QR code using authenticator applications on mobile devices including phones.

Action: Upgrade drupal/alogin to 2.0.6 or later.

composer require drupal/alogin:2.0.6

Affected

Fixed versions

Sources

• osv: DRUPAL-CONTRIB-2025-009
• nvd: CVE-2025-31681
• https://www.drupal.org/sa-contrib-2025-009

CVE-2025-31681 · published 2025-01-29T16:54:02Z · modified 2026-09-10T03:45:06.936699028Z · JSON