Skip to content
OpenAdvisories

Vendor

Helicone

3 known vulnerabilities.

Products

helicone 2 ai-gateway 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-108602

    Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution

    Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal services by using hostnames resolving to private addresses. Attackers can create webh…

    Helicone helicone
  • Medium 6.3
    CVE-2026-15508

    Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery

    A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extracted_path_and_qu…

    Helicone ai-gateway