{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-3532","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-3532\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-3532\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/694456","id":"694456","resource":"node"},"field_sa_advisory_id":"027","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/mcdruid\u0022 rel=\u0022nofollow\u0022\u003EDrew Webber (mcdruid)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Complex\/A:User\/CI:Some\/II:None\/E:Theoretical\/TD:Default","field_sa_description":{"value":"\u003Cp\u003EThis module enables you to use an external OpenID Connect login provider to authenticate and log in users on your site. If a user signs in with a login provider for the first time on the website, a new Drupal user will be created.\u003C\/p\u003E\n\u003Cp\u003EThe module doesn\u0027t sufficiently validate the uniqueness of certain user fields depending on the database engine and its collation.\u003C\/p\u003E\n\u003Cp\u003EAs a result, a user may be able to register with the same email address as another user.\u003C\/p\u003E\n\u003Cp\u003EThis may lead to data integrity issues.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/pfrilling\u0022 rel=\u0022nofollow\u0022\u003EPhilip Frilling (pfrilling)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/ericgsmith\u0022 rel=\u0022nofollow\u0022\u003EEric Smith (ericgsmith)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the OpenID Connect 8.x-1.x module, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/openid_connect\/releases\/8.x-1.5\u0022 rel=\u0022nofollow\u0022\u003EOpenID Connect 8.x-1.5\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E\n\u003Cp\u003EUpdating OpenID Connect will not solve potential issues with existing accounts affected by this bug. See \u003Ca href=\u0022https:\/\/www.drupal.org\/node\/3486109\u0022 rel=\u0022nofollow\u0022\u003EFixing emails that vary only by case\u003C\/a\u003E for additional guidance.\u003C\/p\u003E","format":"1"},"field_sa_type":"Access bypass","field_issue_last_status_change":"1772647379","field_sa_cve":["CVE-2026-3532"],"field_is_psa":"0","field_affected_versions":"\u003C1.5.0","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3576962","id":"3576962","resource":"node"}],"nid":"3577069","vid":"14283202","is_new":false,"type":"sa","title":"OpenID Connect \/ OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-027","edit_url":"https:\/\/www.drupal.org\/node\/3577069\/edit","status":"1","promote":"0","sticky":"0","created":"1772647379","changed":"1772647379","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16495489","id":16495489,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16495490","id":16495490,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16495491","id":16495491,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16495492","id":16495492,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16495493","id":16495493,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1772647379"}]}