CVE-2025-31676
1 advisory.
Packagist/drupal/email_tfa CVE-2025-31676: high 8.8, EPSS 0.56%
This module enables you to do Two-Factor Authentication by email, using a user registered email to send a verification code to the user's email every time the user tries to log in to your site.
Action: Upgrade drupal/email_tfa to 2.0.3 or later.
composer require drupal/email_tfa:2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
CVE-2025-31676 · published · modified · JSON