Multiple vulnerabilities have been identified in @apostrophecms/ai-helper, @apostrophecms/db-connect and apostrophe impacting the database connection layer and AI helper image handling. The issues can allow authenticated users to disrupt service or access internal network resources under certain deployment conditions and may require specific storage or adapter configurations.
CVE-2026-113671 (CVSS 4.3 — Medium): A Server-Side Request Forgery (SSRF) vulnerability in @apostrophecms/ai-helper, specifically in packages/ai-helper/modules/@apostrophecms/ai-helper-image/index.js, allows an authenticated editor to manipulate the HTTP Host header used to derive req.baseUrl and submit an unauthorized PATCH accept request for a base64-generated AI image without a stored url, causing the server to issue an outbound GET request to an attacker-controlled origin and potentially probe internal hosts and ports when the global base URL is unset.[/subscribe_to_unlock_form]
Multiple vulnerabilities have been identified in @apostrophecms/ai-helper, @apostrophecms/db-connect and apostrophe impacting the database connection layer and AI helper image handling. The issues can allow authenticated users to disrupt service or access internal network resources under certain deployment conditions and may require specific storage or adapter configurations.
CVE-2026-113671 (CVSS 4.3 — Medium): A Server-Side Request Forgery (SSRF) vulnerability in @apostrophecms/ai-helper, specifically in packages/ai-helper/modules/@apostrophecms/ai-helper-image/index.js, allows an authenticated editor to manipulate the HTTP Host header used to derive req.baseUrl and submit an unauthorized PATCH accept request for a base64-generated AI image without a stored url, causing the server to issue an outbound GET request to an attacker-controlled origin and potentially probe internal hosts and ports when the global base URL is unset.[emaillocker id="1283"]
CVE-2026-113666 (CVSS 7.1 — High): A denial-of-service vulnerability in @apostrophecms/db-connect occurs when the unsetNestedField helper processes an attacker-controlled project exclusion key such as constructor.prototype.hasOwnProperty without validating path segments and uses delete to remove a shared method from Object.prototype; an authenticated user with view-draft permission, or any logged-in user when guestApiAccess is enabled, can exploit this flaw through SQLite or PostgreSQL adapters to disrupt request processing for all users and tenants until the affected Node.js process is restarted.
The following reports contain further technical details:
[/emaillocker]