| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/ai | ≥ 1.1.0, < 1.1.7≥ 1.2.0, < 1.2.4< 1.0.7 | 1.1.71.2.41.0.7 |
| artificial intelligence | ≥ 1.1.0, < 1.1.7≥ 1.2.0, < 1.2.4< 1.0.7 | 1.1.71.2.41.0.7 |
This modules provides the ability to chat with an AI Agent using a large-language model (LLM) provider for different purposes.
The module doesn’t sufficiently filter LLM responses. This leads to a cross-site scripting (XSS) vulnerability where an attacker can use prompt injections on user-generated content with the LLM as context.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free