CVE-2026-13233 | Server-Side Request Forgery (SSRF) vulnerability in Drupal O…

Description

Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.

Metadata

CVE ID: CVE-2026-13233
State: PUBLISHED
Assigner: drupal
Reserved: 2026-06-24 18:00 UTC
Published: 2026-07-10 21:44 UTC
Last updated: 2026-07-10 21:44 UTC
Primary CWE: CWE-918
CWE-918 Server-Side Request Forgery (SSRF)
Vendor / Product: Drupal / OpenAI Provider
Sources: cve.org · NVD

Severity & Metrics

No CVSS data available.

Affected products (1)

Vendor	Product	Platform	Versions
Drupal	OpenAI Provider	—	0.0.0 < 1.1.1, 1.2.0 < 1.2.2

Weakness (CWE)

CWE	Source	Description
CWE-918	cna	CWE-918 Server-Side Request Forgery (SSRF)

References (1)

https://www.drupal.org/sa-contrib-2026-053