Drupal security advisory (AV25-709)

Serial number: AV25-709
Date: October 30, 2025

On October 29, 2025, Drupal published a security advisory to address a vulnerability in the following product:

  • Simple OAuth (OAuth2) & OpenID Connect – versions 6.0.0 to versions prior to 6.0.7

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates or perform the suggested mitigations.

Date modified: