Vulnerabilities

10 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV only Public PoC CVSS ≥ 9 CVSS ≥ 7 EPSS ≥ 10%EPSS ≥ 50%Window24h 7d 30d 90d All

StackAll WordPress E-commerce Drupal Joomla npm pip Maven Go Packagist RubyGems NuGet

Sortpublished epss cvss KEV date updated vendor: artificial intelligence project ✕

CVE	Vulnerability	CVSS	EPSS	Flags	Affected	Exposure	Published
CVE-2026-13234 +3 in the same advisory: …13237 …13236 …13235	Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scri Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3. NVD description · AI analysis pending	6.1 group max	<1%		artificial intelligence project artificial intelligence	—	Jul 10, 2026
CVE-2026-3573	Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12. NVD description · AI analysis pending	7.5	<1%		artificial intelligence project artificial intelligence	—	Mar 26, 2026
CVE-2025-13981	Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scri Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4. NVD description · AI analysis pending	4.4	<1%		artificial intelligence project artificial intelligence	—	Jan 28, 2026
CVE-2025-31677 +3 in the same advisory: …31678 …31692 …31693	Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intel Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2. NVD description · AI analysis pending	8.8 group max	<1%		artificial intelligence project artificial intelligence	—	Mar 31, 2025