CVE-2026-82270 Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

CVE-2026-82270 Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

CVE-2026-82270

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

CVE-2026-82270 Portkey AI Gateway Server-Side Request Forgery via /v1/proxy/*

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

CVE-2026-82270

Portkey AI Gateway through version 1.15.2 contains a Server-Side Request Forgery (SSRF) vulnerability in the /v1/proxy/* route. The root cause is the absence of the requestValidator middleware on that endpoint. An unauthenticated attacker can set the x-portkey-custom-host header to an internal ad...

EUVD-2026-67801

Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...

CVE-2026-82262 Logto Server-Side Request Forgery via webhook test endpoint

Logto through 1.42.0 contains a server-side request forgery vulnerability in the POST /api/hooks/:id/test endpoint that accepts arbitrary URLs without host validation. Tenant administrators with Management API tokens can make the server issue HTTP POST requests to internal URLs and retrieve...

MAL-2026-14774 Malicious code in 3layerdipstackhr3ocw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7f5462a6cad4608977cbf01ae1fab24a1257afe36d254ce404ca49b5aab99c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14743 Malicious code in 3layerdipstackesp1lb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd59b0798d5b504ce5bc151f4b845c732a5cbf45d046f54b3becbffd944cd38 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackhr3ocw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7f5462a6cad4608977cbf01ae1fab24a1257afe36d254ce404ca49b5aab99c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackkpfva6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 630019d614a8c26a144f9502c87e0c4bc16d904adea23a7c202a1d8ba45632b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-14771 Malicious code in 3layerdipstackhcymwm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9ceeb1377cded900160b5cde819d2490edebf76264bed649b7ccec5cb013f7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14852 Malicious code in 3layerdipstacko8li9w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9886025a6437b781a80821d6f113c08dea138ee45899438c19bf9e7cf3e366c5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackvdy7nf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8345a33d68a541bbd486d2095eda3279011cc8dbc69d8dafcbef98551eedc4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackfywqmz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee0944700e8c39b5f5fbb125caf69265d316217a2edd6163e038a0c895951d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack71tlcd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c76775c03270d6161e9fa4d0be119873dc051cbe3ac0c0635687203fbdb8fa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14670 Malicious code in 3layerdipstack97rmzr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13188e2cc25d797008ddcbc32e1f27d89e1c3de6f64ff67b9c5e021f2ac1e7c3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14753 Malicious code in 3layerdipstackfm45yj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b1ddf92d052ad44338e1b280af5bb2903f102a0de716e1186cde47c0669282 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackcfu35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 044b8051a8aca89d5eed9f4eb9202524d9c5555e6b4c9dca0fdb8061d5449839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackmu4bxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f47ca8b0e44e671faadd3d15253f3396ba78877392e9d4612cbe9d0e803cae The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...