Skip to main content
← Packagist

drupal/ai

18 known vulnerabilities (5 high, 9 medium, 4 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
18 · 5 high, 9 medium, 4 low
Registry
Packagist

Advisories 18

  • CVE-2026-118545Medium 6.5

    AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-266

    Affected: fixed in 1.4.11; from 1.5.0, fixed in 1.5.2.

  • CVE-2026-118546Medium 6.5

    AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267

    Affected: fixed in 1.4.11; from 1.5.0, fixed in 1.5.2.

  • AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268

    Affected: fixed in 1.4.11; from 1.5.0, fixed in 1.5.2.

  • AI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269

    Affected: fixed in 1.4.11; from 1.5.0, fixed in 1.5.2.

  • CVE-2026-118550Medium 5.9

    AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

    Affected: fixed in 1.4.11; from 1.5.0, fixed in 1.5.2.

  • AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271

    Affected: fixed in 1.4.11; from 1.5.0, fixed in 1.5.2.

  • CVE-2026-118552Medium 6.5

    AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272

    Affected: fixed in 1.4.11; from 1.5.0, fixed in 1.5.2.

  • CVE-2026-118553Medium 5.5

    AI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273

    Affected: fixed in 1.4.11; from 1.5.0, fixed in 1.5.2.

  • AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119

    Affected: fixed in 1.3.13; from 1.4.0, fixed in 1.4.8.

  • CVE-2026-84912Medium 4.6

    AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120

    Affected: fixed in 1.3.13; from 1.4.0, fixed in 1.4.8.

  • AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055

    Affected: fixed in 1.2.17; from 1.3.0, fixed in 1.3.8; from 1.4.0, fixed in 1.4.3.

  • CVE-2026-13234Medium 6.1

    AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054

    Affected: fixed in 1.2.17; from 1.3.0, fixed in 1.3.8; from 1.4.0, fixed in 1.4.3.

  • AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028

    Affected: fixed in 1.1.11; from 1.2.0, fixed in 1.2.12.

  • CVE-2025-13981Medium 4.4

    AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119

    Affected: fixed in 1.0.7; from 1.1.0, fixed in 1.1.7; from 1.2.0, fixed in 1.2.4.

  • CVE-2025-31693Medium 6.6

    AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022

    Affected: fixed in 1.0.5.

Show all 18 advisoriesShow fewer advisories
  • AI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021

    Affected: fixed in 1.0.5.

  • AI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-004

    Affected: fixed in 1.0.3.

  • AI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003

    Affected: from 1.0.0, fixed in 1.0.2.