The drupal/ai module has a moderately critical security advisory (SA-CONTRIB-2026-028) for Information Disclosure. Certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) can expose secret LLM communications when rendering HTML/Markdown in a browser. The module needs to be upgraded to the latest patched release.
Affected area: Composer dependencies / AI module integrations
Related files/components: composer.json, composer.lock
Tasks
- Run
composer update drupal/ai to upgrade from the currently installed version (1.2.4) to the latest patched release
- Verify the site functions correctly after the upgrade
- Write tests
The
drupal/aimodule has a moderately critical security advisory (SA-CONTRIB-2026-028) for Information Disclosure. Certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) can expose secret LLM communications when rendering HTML/Markdown in a browser. The module needs to be upgraded to the latest patched release.Affected area: Composer dependencies / AI module integrations
Related files/components:
composer.json,composer.lockTasks
composer update drupal/aito upgrade from the currently installed version (1.2.4) to the latest patched release