VYPR

valuecell

by ValueCell AI

CVEs (1)

  • CVE-2026-111320MedOct 15, 2026
    risk 0.42cvss 6.5epss —

    ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and trigger POST…