PatchClock

PHP security digest · Packages

drupal/auth_login_plus security advisories

2 advisories we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. Not rated 7 Oct 2026

    This module provides TOTP-based two-factor authentication (2FA) for Drupal, with an optional setting to enforce 2FA for all users site-wide. The module may all...

    Fixed in 1.0.1 · CVE-2026-107261

  2. Not rated 7 Oct 2026

    This module provides TOTP-based two-factor authentication (2FA) for Drupal. The module doesn't enforce the second factor when a user logs in with Drupal core's...

    Fixed in 1.0.1 · CVE-2026-107254

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including drupal/auth_login_plus, and the version that fixes it.