Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.CreditsKuniyoshi Noguchi (kuninogu)Artem Dmitriiev (a.dmitriiev)Kuniyoshi Noguchi (kuninogu)Marcus Johansson (marcus_johansson)Bram Driesen (bramdriesen)Greg Knaddison (greggles)Referenceshttps://www.drupal.org/sa-contrib-2026-053
