Vendor
Drupal
576 known vulnerabilities.
Products
Drupal core 52
Webform 20
Core 19
AI (Artificial Intelligence) 18
SAML SSO - Service Provider 13
Open Social 8
Commerce Core 7
Enterprise MFA - TFA for Drupal 6
Monster Menus 4
Two-factor Authentication (TFA) 4
COOKiES Consent Management 4
Drupal Canvas 4
Tagify 3
Facets 3
OpenID Connect / OAuth client 3
Disable Login Page 3
Single Content Sync 3
Authenticator Login 3
Login Disable 3
Commerce Stripe 3
Gammu SMS Daemon 3
UI Icons 3
One Time Password 3
Cloud 2
Access code 2
CivicTheme Design System 2
Webform REST 2
Node Access Rebuild Progressive 2
AI Agents 2
Data-module 2
Frontend Editing 2
Paragraphs 2
Anti-Spam by CleanTalk 2
POST File 2
Unpublished Node Permissions 2
Field Permissions 2
Block Attributes 2
ECA: Event - Condition - Action 2
Acquia DAM 2
Paragraphs table 2
1 result · Clear filters · Feed
-
Low 3.3CVE-2026-13233 Public exploit
OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053
Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.