{"data":{"id":"4af0d09e-f0aa-460d-b206-35d13088b6fc","title":"CVE-2026-13233: Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This…","summary":"CVE-2026-13233 is a Server-Side Request Forgery (SSRF) flaw in the OpenAI Provider module for Drupal, classified as CWE-918. The issue affects OpenAI Provider versions from 0.0.0 to 1.1.1 and from 1.2.0 to 1.2.2. NIST has not yet provided an NVD assessment, and the advisory is published at drupal.org as sa-contrib-2026-053.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-13233","publishedAt":"2026-07-10T22:16:39.397Z","cveId":"CVE-2026-13233","cweIds":["CWE-918"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Drupal OpenAI Provider"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Drupal OpenAI Provider server-side request forgery","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00208,"epssCheckedAt":"2026-10-14T06:09:07.174Z","kevDateAdded":null,"advisoryAliases":["GHSA-65px-3fq7-92h3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:46:52.061Z","patchAvailable":null,"disclosureDate":"2026-07-10T22:16:39.397Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}