Helicone

3 CVEs across 2 Helicone products. Browse Helicone vulnerabilities, severities, and proof-of-concept exploits.

Helicone products with known CVEs

ProductCVEs
Helicone2
Ai-Gateway1
Helicone CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-108602Medium4.32026-10-10Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to…
CVE-2026-85178High7.72026-09-03Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization…
CVE-2026-15508Medium6.32026-07-12A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function build_target_url of the file ai-gateway/src/dispatcher/service.rs o…