https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T22:46:46.103632+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110719 CVE-2026-110719 — Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header 2026-10-25T22:46:46.104985+00:00

Affected: Portkey-AI gateway

Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services because isValidCustomHost trusts localhost-style hosts when TRUSTED_CUSTOM_HOSTS is unset. Attackers can send /v1 requests with a crafted x-portkey-custom-host header, such as via the ollama provider, to make the gateway call internal services and return their responses.