[IT-SecNots] [Security-news] Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085

[security-news AT drupal.org]

View online: https://www.drupal.org/sa-contrib-2026-085

Project: Email Login OTP [1]
Date: 2026-July-22
Security risk: *Critical* 16 ∕ 25
AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:All [2]
Vulnerability: Unsupported

Affected versions: *
CVE IDs: CVE-2026-16642
Description: 
The security team is marking this project unsupported. There is a known
security issue with the project that has not been fixed by the maintainer. If
you would like to maintain this project, please read:
https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...
[3]

Solution: 
If you use this project, you should uninstall it.  To take over
maintainership, please read
https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-mai...
[4]

Reported By: 
 * Pierre Rudloff (prudloff) [5] of the Drupal Security Team

------------------------------------------------------------------------------
Contribution record [6]

[1] https://www.drupal.org/project/email_login_otp
[2] https://www.drupal.org/security-team/risk-levels
[3]  
https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-maintainer-of-a-project-that-is-unsupported-for-security-reasons
[4]  
https://www.drupal.org/node/251466#s-becoming-owner-maintainer-or-co-maintainer-of-a-project-that-is-unsupported-for-security-reasons
[5] https://www.drupal.org/u/prudloff
[6]  
https://new.drupal.org/contribution-record?source_link=https%3A//www.drupal.org/node/3612087

_______________________________________________
Security-news mailing list -- security-news AT drupal.org
To unsubscribe send an email to security-news-leave AT drupal.org
Unsubscribe at