Intel

AIKIDO-2026-520091

drupal/disable_login is vulnerable to Use of Unmaintained Third Party Components

Use of Unmaintained Third Party ComponentsCVE-2026-18260 Published 4 days ago

91

Critical Risk

This Affects:

Are you affected? Scan for Free

TL;DR

The Drupal security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

drupal/disable_login is vulnerable to Use of Unmaintained Third Party Components in all versions.

How to fix this

Remove the drupal/disable_login library from your project.