CVE-2025-31681
2 advisories.
Packagist/drupal/alogin CVE-2025-31681: critical 9.8
Drupal Authenticator Login Missing Authorization vulnerability
Action: Upgrade drupal/alogin to 2.0.6 or later.
composer require drupal/alogin:2.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.6 | - |
Fixed versions
| 2.0.6 |
Sources
- osv: GHSA-jwpx-6c4p-q4jq
- https://nvd.nist.gov/vuln/detail/CVE-2025-31681
- https://git.drupalcode.org/project/alogin
- https://www.drupal.org/sa-contrib-2025-009
CVE-2025-31681 · published · modified · JSON
Packagist/drupal/alogin CVE-2025-31681: unknown
This module allows a site to setup two factor authentication via QR code using authenticator applications on mobile devices including phones.
Action: Upgrade drupal/alogin to 2.0.6 or later.
composer require drupal/alogin:2.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.6 | - |
Fixed versions
| 2.0.6 |
Sources
CVE-2025-31681 · published · modified · JSON