CVE-2026-13233EPSS p9.9%

CVE-2026-13233CVE-2026-13233

openai_provider_project / openai_provider

Description

Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.

Scoring

CVSS 3.3 ()
VectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
EPSS0.21% probability of exploitation · percentile 9.9% · 2026-10-05T12:00:23Z
Last modified2026-08-06
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.