What’s Vulnerable › Products

@apostrophecms ai-helper vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @apostrophecms ai-helper version is affected

Latest @apostrophecms ai-helper vulnerabilities

• CVE-2026-113671 — ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF (CVSS 4.3)