req_llm vulnerabilities (Hex)

1 vulnerability.

• req_llm Hex WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers CVE-2026-107685 Fix available 9.1 CriticalOctober 23, 2026