Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2026-13233
created 2 weeks, 2 days ago Activity log
  • Created & dismissed (no matching packages found) suggestion 2 weeks, 2 days ago
OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053

Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.

Affected products

OpenAI Provider
  • <1.2.2
  • <1.1.1