LLMGateway vulnerabilities

CVEs whose affected-version data names the LLMGateway package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-108719Medium· 5.0

3w ago

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url extension

LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url extension. Attackers can supply loopback, private, or cloud-me…

▾ Sunlittheopenco · LLMGatewayEPSS 0.28%via NVD