{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-73476","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-73476\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-73476\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/2634568","id":"2634568","resource":"node"},"field_sa_advisory_id":"098","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/akalata\u0022 rel=\u0022nofollow\u0022\u003ESwan Kalata (akalata)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/drumm\u0022 rel=\u0022nofollow\u0022\u003ENeil Drumm (drumm)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Basic\/A:User\/CI:Some\/II:Some\/E:Theoretical\/TD:Default","field_sa_description":{"value":"\u003Cp\u003EThis module enables you to authenticate Drupal users against external identity providers.  \u003C\/p\u003E\n\u003Cp\u003EThe module does not sufficiently ensure exact matching of externally supplied identity values when storing and looking up authentication mappings under certain database collation configurations.  \u003C\/p\u003E\n\u003Cp\u003EThis vulnerability is minimally mitigated by the fact that it affects only sites using impacted MySQL or MariaDB collation settings for the module\u2019s authentication mapping storage. Affected collations are quite common so all sites are encouraged to upgrade.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/svendecabooter\u0022 rel=\u0022nofollow\u0022\u003ESven Decabooter (svendecabooter)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/whale120\u0022 rel=\u0022nofollow\u0022\u003E\u6649\u5b87 \u6797 (whale120)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the externalauth module for Drupal, upgrade to \u003Ca href=\u0022\/project\/externalauth\/releases\/2.0.13\u0022 rel=\u0022nofollow\u0022\u003E2.0.13\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Access bypass","field_issue_last_status_change":"1786643998","field_sa_cve":["CVE-2026-73476"],"field_is_psa":"0","field_affected_versions":"\u003C2.0.13","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3616303","id":"3616303","resource":"node"}],"nid":"3610827","vid":"14460189","is_new":false,"type":"sa","title":"External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-098","edit_url":"https:\/\/www.drupal.org\/node\/3610827\/edit","status":"1","promote":"0","sticky":"0","created":"1786557363","changed":"1786643998","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16723662","id":16723662,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16723663","id":16723663,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16728796","id":16728796,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16728797","id":16728797,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16728798","id":16728798,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16728799","id":16728799,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1786557363"}]}