@portkey-ai/gateway vulnerabilities

CVEs whose affected-version data names the @portkey-ai/gateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-82270High· 7.5

1mo ago

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/* route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward …

▾ TwilightPortkey-AI · @portkey-ai/gatewayEPSS 0.48%via NVD