valuecell-ai/valuecell vulnerabilities

Latest valuecell-ai/valuecell CVEs

Newest publication first

1. CVE-2026-111320 ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check

   Published 2026-10-15

   Medium·CVSS 6.9 EPSS 0.39%

   ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST /api/v1...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.