PatchClock

PHP security digest · Packages

drupal/key_auth security advisories

1 advisory we have followed since September 2026, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. Not rated 9 Sep 2026

    This module enables you to add key-based authentication on a per-user basis. The module doesn't cache per user, potentially allowing an attacker to view anot...

    Fixed in 2.2.4 · CVE-2026-87940

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including drupal/key_auth, and the version that fixes it.