{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-5343","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-5343\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-5343\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/2639156","id":"2639156","resource":"node"},"field_sa_advisory_id":"031","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/damienmckenna\u0022 rel=\u0022nofollow\u0022\u003EDamien McKenna (damienmckenna)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/xjm\u0022 rel=\u0022nofollow\u0022\u003EJess  (xjm)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Complex\/A:None\/CI:All\/II:All\/E:Theoretical\/TD:All","field_sa_description":{"value":"\u003Cp\u003EThis module enables you to perform SAML-protocol-based single-sign-on (SSO) on a Drupal site.\u003C\/p\u003E\n\u003Cp\u003EThe module doesn\u0027t sufficiently block access, leading to a authentication bypass vulnerability.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/sudhanshu0542\u0022 rel=\u0022nofollow\u0022\u003ESudhanshu Dhage (sudhanshu0542)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/tim_dj\u0022 rel=\u0022nofollow\u0022\u003ETim de Jong | Freelance Drupal Developer (tim_dj)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cp\u003EIf you are using the \u003Cem\u003ESAML SSO - Service Provider\u003C\/em\u003E module for Drupal, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/miniorange_saml\/releases\/3.1.4\u0022 rel=\u0022nofollow\u0022\u003ESAML SSO - Service Provider 3.1.4\u003C\/a\u003E.\u003C\/p\u003E","format":"1"},"field_sa_type":"Authentication bypass","field_issue_last_status_change":"1775139193","field_sa_cve":["CVE-2026-5343"],"field_is_psa":"0","field_affected_versions":"\u003C3.1.4","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3582611","id":"3582611","resource":"node"}],"nid":"3580483","vid":"14314437","is_new":false,"type":"sa","title":"SAML SSO - Service Provider  - Critical - Authentication bypass - SA-CONTRIB-2026-031","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-031","edit_url":"https:\/\/www.drupal.org\/node\/3580483\/edit","status":"1","promote":"0","sticky":"0","created":"1775061494","changed":"1775139193","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16535107","id":16535107,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16535108","id":16535108,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16535109","id":16535109,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16535111","id":16535111,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16535116","id":16535116,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16535117","id":16535117,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1775061494"}]}