Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Drupal | amazee.ai Private AI Provider | 0.0.0 – < 1.3.7, 1.4.0 – < 1.4.3 | 1.3.7 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/ai_provider_amazeeio | < 1.3.7 · >= 1.4.0, < 1.4.3 | 1.3.7, 1.4.3 | DRUPAL-CONTRIB-2026-134 |
Advisories 1
- WID-SEC-2026-3284 Drupal Erweiterungen: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 21, 2026