@apostrophecms/ai-helper vulnerabilities (npm)

1 vulnerability.

• @apostrophecms/ai-helper npm ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF CVE-2026-113671 Fix available 4.3 MediumOctober 20, 2026