CVE-2026-96385

The REST & JSON API Authentication for Drupal module (versions 0.0.0 to 3.2.0 ) is vulnerable to an authentication bypass . The root cause is that the module fails to sufficiently validate authentication requirements for all API requests, which could allow unauthorized access to the API. No speci...

EUVD-2026-107819

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & JSON API Authentication for Drupal versions: from 0.0.0 to 3.2.0...

REST & JSON API Authentication for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2026-182

This module enables you to add an extra authentication layer to the API. The module does not sufficiently validate authentication requirements for all API requests, which can result in an access bypass vulnerability...