Composer drupal/miniorange_2fa has 7 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2025-47707 | The module enables you to add second-factor authentication in addition to the default Drupal login. The module doesn't | unknown | 0.0 | <4.7.0 or >=5.0.1 <5.2.0 | 4.7.0, 5.2.0 |
| CVE-2025-47710 | The module enables you to add second-factor authentication in addition to the default Drupal login. The module does not | unknown | 0.0 | <4.7.0 or >=5.0.1 <5.2.0 | 4.7.0, 5.2.0 |
| CVE-2025-47706 | The module enables you to add second-factor authentication in addition to the default Drupal login. The module doesn't | unknown | 0.0 | <4.7.0 or >=5.0.1 <5.2.0 | 4.7.0, 5.2.0 |
| CVE-2025-47709 | The module enables you to add second-factor authentication in addition to the default Drupal login. The module doesn't | unknown | 0.0 | <4.7.0 or >=5.0.1 <5.2.0 | 4.7.0, 5.2.0 |
| CVE-2025-6675 | The module enables you to add second-factor authentication on top of the default Drupal login. The module does not suff | unknown | 0.0 | <4.8.0 or >=5.0.1 <5.2.1 | 4.8.0, 5.2.1 |
| CVE-2025-47708 | The module enables you to add second-factor authentication in addition to the default Drupal login. The module doesn't | unknown | 0.0 | <4.7.0 or >=5.0.1 <5.2.0 | 4.7.0, 5.2.0 |
| CVE-2026-107268 | This module enables you to add an extra layer of verification for user login flow. The Two Factor Authentication - TFA | unknown | 0.0 | <5.4.1 or >=5.5.0 <5.5.2 | 5.4.1, 5.5.2 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked