Skip to content
OpenAdvisories
Medium · 6.6 CVE-2025-31693 DRUPAL-CONTRIB-2025-022EUVD-2025-9031GHSA-vx9m-rfxq-gr74

AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022

Published Mar 31, 2025 · Updated Apr 3, 2025 · Assigned by drupal

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.

Affected products

VendorProductAffectedFixed
Drupal AI (Artificial Intelligence) 0.0.0 – < 1.0.5 1.0.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai < 1.0.5 1.0.5 DRUPAL-CONTRIB-2025-022

Advisories 1

References