CVE-2026-13233

Published Jul 10, 2026·Updated Aug 6, 2026

NVD Description

Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.

Public Exploits & PoCs1 found

[POC] CVE-2026-13233 — drupal-openai-provider-ssrf-cve-2026-13233

CVE-2026-13233 (Drupal OpenAI Provider, SA-CONTRIB-2026-053): response-URL SSRF / local file read. Untrusted upstream, not the prompt. Safe reproducer + detections. Fixed in 1.1.1/1.2.2.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free