Threats affecting pkg:composer/drupal/rest_json_api_authentication

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-96385REST & JSON API Authentication for Drupal · Authentication Bypass Using an Alternate Path or Channel Medium6.5EPSS 0.3%2026-10-22CVE Database V5CVE-2026-96385 CVE-2026-96385 is an authentication bypass vulnerability in the REST & JSON API Authentication module for Drupal. It affects versions from 0.0.0 up to but not including 3.2.0. The vulnerability allows an attacker to bypass authentication using an alternate path or channel. This issue has a medium severity with a CVSS score of 6.5. A fix is available in version 3.2.0. EPSS 0.3%Vulnerability CWE-288	CVE Database V5	2026-10-22

Page 1 of 1 · 1 duplicate CVE record merged