CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-13233

Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 11.3%

CVSS Severity

CVSS v3 Score 3.3

References

https://www.drupal.org/sa-contrib-2026-053

Products affected by CVE-2026-13233

Openai Provider Project » Openai Provider » Version: 1.0.0

cpe:2.3:a:openai_provider_project:openai_provider:1.0.0
Openai Provider Project » Openai Provider » Version: 1.0.1

cpe:2.3:a:openai_provider_project:openai_provider:1.0.1
Openai Provider Project » Openai Provider » Version: 1.0.2

cpe:2.3:a:openai_provider_project:openai_provider:1.0.2
Openai Provider Project » Openai Provider » Version: 1.1.0

cpe:2.3:a:openai_provider_project:openai_provider:1.1.0
Openai Provider Project » Openai Provider » Version: 1.2.0

cpe:2.3:a:openai_provider_project:openai_provider:1.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-13233

Products

Pricing

Contact Us