Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-210 (CVE-2026-107307)

    Vulnerability from drupal – Published: 2026-10-07 16:35 – Updated: 2026-10-07 16:35 – Source website
    VLAI
    Details

    This module adds a "Generate internal links" action to the AI CKEditor toolbar, letting editors select text and have the module search the site's content for relevant pages to link to.

    The module's search query did not respect entity access when returning results to the browser.

    This vulnerability is mitigated by the fact that an user must have permission to use the AI CKEditor "Generate internal links" feature on a text format.

    Credits
    Marcus Johansson (marcus_johansson) www.drupal.org/u/marcus_johansson
    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c1.0.3"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/smartlinker_ai"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c1.0.3"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-107307"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/marcus_johansson"
      ],
      "name": "Marcus Johansson (marcus_johansson)"
    }
  ],
  "details": "This module adds a \"Generate internal links\" action to the AI CKEditor toolbar, letting editors select text and have the module search the site\u0027s content for relevant pages to link to.\n\nThe module\u0027s search query did not respect entity access when returning results to the browser.\n\nThis vulnerability is mitigated by the fact that an user must have permission to use the AI CKEditor \"Generate internal links\" feature on a text format.",
  "id": "DRUPAL-CONTRIB-2026-210",
  "modified": "2026-10-07T16:35:32.000Z",
  "published": "2026-10-07T16:35:32.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-210"
    }
  ],
  "schema_version": "1.7.0"
}