Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-13234 |
|
Cross-Site Scripting (XSS) in drupal/ai (CVE-2026-13234)
cross-site scripting in drupal/ai (CVE-2026-13234). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.17, 1.3.8, 1.4.3` or later.
|
| CVE-2026-13235 |
|
Vulnerability in drupal/ai (CVE-2026-13235)
vulnerability in drupal/ai (CVE-2026-13235). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.2.17, 1.3.8, 1.4.3` or later.
|
| CVE-2026-13236 |
|
Vulnerability in drupal/ai_agents (CVE-2026-13236)
vulnerability in drupal/ai_agents (CVE-2026-13236). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.4, 1.2.5, 1.3.1` or later.
|
| CVE-2026-13237 |
|
Authorization Flaw in drupal/ai_agents (CVE-2026-13237)
vulnerability in drupal/ai_agents (CVE-2026-13237). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `1.1.4, 1.2.5, 1.3.1` or later.
|
| CVE-2025-31692 |
|
OS Command Injection in drupal (CVE-2025-31692)
OS command injection in drupal (CVE-2025-31692). Successful exploitation can lead to full system takeover.
|
| CVE-2025-31693 |
|
OS Command Injection in drupal (CVE-2025-31693)
OS command injection in drupal (CVE-2025-31693). Successful exploitation can lead to full system takeover.
|