| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/ai | ≥ 1.5.0, < 1.5.2< 1.4.11 | 1.5.21.4.11 |
This module enables you to use AI on the website. It also enables you to interact with AI providers.
The module does not sufficiently validate links under certain conditions, potentially allowing the exfiltration of sensitive information to external sites.
This vulnerability is mitigated by the fact that an attacker must use untrusted sources when interacting with the AI module in a way that produces rendered HTML.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free