Vulnerabilities

TI-2026-11239 CVE-2026-13235 · GHSA-4c7f-qhrm-6jc8

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055

LOW 15

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00208 Published 2026-07-10 Fixed in 1.2.17, 1.3.8 +1 CWE-862

TI-2026-11238 CVE-2026-13234 · GHSA-q48q-x876-9gr8

AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054

LOW 27

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00253 Published 2026-07-10 Fixed in 1.2.17, 1.3.8 +1 CWE-79

Vulnerabilities

Filters

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055

AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054