CVE-2026-87936
CVE-2026-87936 · amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.
CVSS 6.5 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
amazee.ai private ai provider
- Versions
- ≥ 0.0.0, < 1.3.7: Affected (semver)
- ≥ 1.4.0, < 1.4.3: Affected (semver)
Update to 1.3.7; Update to 1.4.3
drupal/ai_provider_amazeeio Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.3.7
- ECOSYSTEM: ≥ 1.4.0, < 1.4.3
Update to 1.3.7; Update to 1.4.3