Composer drupal/ai has 18 known advisories in the phpwarden feed. Feed 2026.10.29.3, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2025-31692 | The AI Automators module (a submodule of AI) enables you to create different automated tasks that fills out field data u | medium | 0.0 | <1.0.5 | 1.0.5 |
| CVE-2025-31693 | The AI Automators module (a submodule of AI) enables you to create different automated tasks that fills out a field data | medium | 6.6 | <1.0.5 | 1.0.5 |
| CVE-2025-31678 | The AI logging sub-module enables you to log AI requests and responses for debugging and auditing purposes. The module | high | 8.2 | <1.0.3 | 1.0.3 |
| CVE-2026-13234 | The module and certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) provide the abi | unknown | 0.0 | <1.2.17 or >=1.3.0 <1.3.8 or >=1.4.0 <1.4.3 | 1.2.17, 1.3.8, 1.4.3 |
| CVE-2026-3573 | The module and certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) provide the abi | unknown | 0.0 | <1.1.11 or >=1.2.0 <1.2.12 | 1.1.11, 1.2.12 |
| CVE-2025-31677 | The Drupal AI module provides a framework for easily integrating Artificial Intelligence on any Drupal site using any ki | high | 8.8 | >=1.0.0 <1.0.2 or >=1.0.0 and <1.0.2 | 1.0.2 |
| CVE-2026-13235 | This module enables you to utilize an agent to use Drupal core actions tools with bypassed access. Certain Drupal core | unknown | 0.0 | <1.2.17 or >=1.3.0 <1.3.8 or >=1.4.0 <1.4.3 | 1.2.17, 1.3.8, 1.4.3 |
| CVE-2026-84911 | This AI Chatbot module enables you to have a Chatbot using assistants to help you with your Drupal website. The module | unknown | 0.0 | <1.3.13 or >=1.4.0 <1.4.8 | 1.3.13, 1.4.8 |
| CVE-2026-84912 | This submodule AI Translate enables you to automatically translate entities. The module doesn't sufficiently check acce | unknown | 0.0 | <1.3.13 or >=1.4.0 <1.4.8 | 1.3.13, 1.4.8 |
| CVE-2025-13981 | This modules provides the ability to chat with an AI Agent using a large-language model (LLM) provider for different pur | unknown | 0.0 | <1.0.7 or >=1.1.0 <1.1.7 or >=1.2.0 <1.2.4 | 1.0.7, 1.1.7, 1.2.4 |
| CVE-2026-118545 | This module enables you to use AI on the website. The module does not sufficiently restrict HTML rendering, allowing cr | unknown | 0.0 | <1.4.11 or >=1.5.0 <1.5.2 | 1.4.11, 1.5.2 |
| CVE-2026-118546 | This module enables you to use AI on the website. It includes an AI Chatbot submodule allows you to setup a chatbot. Un | unknown | 0.0 | <1.4.11 or >=1.5.0 <1.5.2 | 1.4.11, 1.5.2 |
| CVE-2026-118548 | This module enables you to use AI on the website. It also enables you to interact with AI providers. The module does no | unknown | 0.0 | <1.4.11 or >=1.5.0 <1.5.2 | 1.4.11, 1.5.2 |
| CVE-2026-118549 | This AI module enables you to interact with AI providers. It has a service that helps any consumer of the module to stop | unknown | 0.0 | <1.4.11 or >=1.5.0 <1.5.2 | 1.4.11, 1.5.2 |
| CVE-2026-118550 | This module provides a framework for integrating Drupal with AI providers. Its AI Search submodule provides a Search API | unknown | 0.0 | <1.4.11 or >=1.5.0 <1.5.2 | 1.4.11, 1.5.2 |
| CVE-2026-118551 | This module provides a framework for integrating AI providers and features into Drupal. Audio for every speech-to-text | unknown | 0.0 | <1.4.11 or >=1.5.0 <1.5.2 | 1.4.11, 1.5.2 |
| CVE-2026-118552 | This module provides a framework for integrating AI providers and features into Drupal. The module doesn't sufficiently | unknown | 0.0 | <1.4.11 or >=1.5.0 <1.5.2 | 1.4.11, 1.5.2 |
| CVE-2026-118553 | The AI module includes a submodule, AI Automator. This submodule allows you to automatically fill out fields using AI, b | unknown | 0.0 | <1.4.11 or >=1.5.0 <1.5.2 | 1.4.11, 1.5.2 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked