Lucene search
+L
Openai Provider ProjectOpenai Provider

1 matches found

CVE
CVE
added 2026/07/10 9:44 p.m.43 views

CVE-2026-13233

The CVE-2026-13233 entry describes a Server-Side Request Forgery (SSRF) in the Drupal OpenAI Provider module. Affected are Drupal OpenAI Provider versions 0.0.0–1.1.1 and 1.2.0–1.2.2. Root cause: insufficient sanitization of user-supplied URLs, enabling SSRF. Impact is limited to the described vu...

3.3CVSS6.1AI score0.00208EPSS
Save