Skip to content
OpenAdvisories

Vendor

Portkey-AI

3 known vulnerabilities.

Products

gateway 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-66405

    Portkey.ai Gateway: Server-Side Request Forgery (SSRF) in Custom Host

    Portkey.ai Gateway is a blazing fast AI Gateway with integrated guardrails. Prior to 1.14.0, the gateway determined the destination baseURL by prioritizing the value in the x-portkey-custom-host request header. The proxy route then appends the client-specifie…

    Portkey-AI gateway @portkey-ai/gateway npm