Packagist/drupal/oauth2_client CVE-2025-31684: medium 6.8, EPSS 0.18%

This module enables a developer to create dedicated OAuth2 clients for connecting to external APIs and other OAuth protected resources.

Action: Upgrade drupal/oauth2_client to 4.1.3 or later.

composer require drupal/oauth2_client:4.1.3

Affected

Fixed versions

Sources

• osv: DRUPAL-CONTRIB-2025-013
• nvd: CVE-2025-31684
• https://www.drupal.org/sa-contrib-2025-013

CVE-2025-31684 · published 2025-02-05T17:24:48Z · modified 2026-09-10T03:46:10.583124636Z · JSON