The 'disable_login' Drupal contributed project has a known security vulnerability that remains unpatched because the project is no longer supported by its maintainer. The security team has publicly marked the project as unsupported for security reasons. No CVSS score or detailed technical information about the vulnerability is available. There are no known exploits in the wild. The vendor or maintainer has not provided a fix, and no patch links exist. Users are directed to the Drupal community guidance for assuming maintenance responsibilities of unsupported projects.

The unresolved security vulnerability in the unsupported 'disable_login' project could pose a risk to users who continue to deploy it. Without a fix, systems using this project may remain vulnerable to potential exploitation, although no known exploits have been reported. The exact impact cannot be determined from the available information.

Since the project is unsupported and no patch is available, users should consider discontinuing use of the 'disable_login' project or take over maintenance to address the security issue. Refer to the Drupal community guidance on becoming a maintainer for unsupported projects: https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-maintainer-of-a-project-that-is-unsupported-for-security-reasons. Patch status is not yet confirmed — check the vendor advisory or Drupal security announcements for any updates.