CVE-2026-87936

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.

Traduire en français

Produits concernés

• Drupal amazee.ai Private AI Provider

Faiblesses (CWE)

• CWE-89

Références

• https://www.drupal.org/sa-contrib-2026-134

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories