SA-CONTRIB-2026-017: Drupal Canvas SSRF + Info Disclosure — The Hidden Submodule Problem

SA-CONTRIB-2026-017 is a moderately critical Drupal Canvas advisory, but the real risk hinges on one question: is the hidden canvas_ai submodule enabled? If you do not know the answer, that is the problem. 🚨 SSRF + Information Disclosure CVE-2026-3...