Drupal security advisory (AV25-514)

Serial number: AV25-514
Date: August 14, 2025

On August 13, 2025, Drupal published security advisories to address vulnerabilities in the following products:

• Authenticator Login (Alogin) – versions prior to 2.1.4
• Layout Builder Advanced Permissions – version 2.2.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096
• Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097
• Drupal Security Advisories