ValueCell vulnerabilities

CVEs whose affected-version data names the ValueCell package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111320Medium· 6.5

yesterday

ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check

ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provid…

▾ SunlitValueCell-ai · ValueCellvia CVEORG