CVE-2025-3129

Packagist/drupal/access_code CVE-2025-3129: medium 4.8, EPSS 0.27%

This module enables users to log in using a short access code instead of providing a username/password combination.

Action: Upgrade drupal/access_code to 2.0.4 or later.

composer require drupal/access_code:2.0.4

Affected

Fixed versions

Sources

• osv: DRUPAL-CONTRIB-2025-028
• nvd: CVE-2025-3129
• https://www.drupal.org/sa-contrib-2025-028

CVE-2025-3129 · published 2025-04-02T17:02:32Z · modified 2026-09-10T03:45:04.725334097Z · JSON