~ / search / GHSA-c8q6-wp7v-46r9

GHSA-c8q6-wp7v-46r9

Drupal AI Missing Authorization vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-31678

Packages

EcosystemPackageAffectedFixed in
Packagist drupal/ai < 1.0.3 1.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.

References

External links from the advisory. They lead to third-party sites.