Threats tagged 'drupal-contrib-2026-268'

The Drupal AI module has a vulnerability where it does not sufficiently validate links under certain conditions, which could allow sensitive information to be exfiltrated to external sites. Exploitation requires the attacker to use untrusted sources that interact with the AI module in a way that produces rendered HTML. Fixed versions 1.4.11 and 1.5.2 address this issue.