Threats tagged 'drupal-contrib-2026-272'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118552drupal/ai · This module provides a framework for integrating AI providers and features into Drupal High2026-10-28GCVE DatabaseCVE-2026-118552 The Drupal AI module has a cross-site scripting (XSS) vulnerability due to insufficient sanitization of certain HTMX attributes. This flaw affects versions prior to 1.4.11 and versions from 1.5.0 up to but not including 1.5.2. Fixed versions 1.4.11 and 1.5.2 address this issue. Vulnerability #drupal-contrib-2026-272 #packagist-https-packages-drupa	GCVE Database	2026-10-28

Page 1 of 1