Go to main page
Versions in this module
v0
Feb 7, 2026 GO-2025-4154
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Changes in this version
type PerformanceSetting
Feb 6, 2026 GO-2025-4154 +1 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
Feb 5, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Feb 4, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Feb 4, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Feb 4, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Feb 3, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Feb 3, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Feb 3, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Feb 3, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Feb 3, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api
Jan 29, 2026 GO-2025-4154 +2 more
GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api