Advisories · Technology

helicone.

Every CVE that names helicone among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108602 CVE record

CVSS 5.3 Medium

Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution
- helicone
- Server-side request forgery (SSRF)
Not analysed yet 10 Oct 2026
CVE-2026-85178 CVE record

CVSS 8.3 High

Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter
- helicone
- Broken access control
Not analysed yet 3 Sept 2026