CVE-2026-108602

The software Helicone (versions through v2025.08.21-1 ) is vulnerable to a Server-Side Request Forgery (SSRF) in the Jawn webhook sender component. The root cause allows authenticated organization users to reach internal services by providing hostnames that resolve to private addresses or utilize...