Helicone
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| helicone | 2 | – | Oct 10, 2026 |
| ai-gateway | 1 | – | Jul 12, 2026 |
Exploited and recent CVEs
- CVE-2026-108602 Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution 0.2%
- CVE-2026-85178 Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter 0.4%
- CVE-2026-15508 Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery 0.3%