billingexpr

package

Versions in this module

v1
Jul 7, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Jul 7, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Aug 26, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Aug 18, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Aug 7, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Aug 1, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Jul 26, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Jul 11, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Jul 7, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Jul 7, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Jul 6, 2026 GO-2025-4154 +2 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Jul 6, 2026 GO-2025-4154 +3 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Jul 3, 2026 GO-2025-4154 +3 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Jun 24, 2026 GO-2025-4154 +4 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Jun 20, 2026 GO-2025-4154 +4 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Jun 19, 2026 GO-2025-4154 +4 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Jun 18, 2026 GO-2025-4154 +4 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Jun 13, 2026 GO-2025-4154 +4 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
May 26, 2026 GO-2025-4154 +5 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
May 26, 2026 GO-2025-4154 +5 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
May 22, 2026 GO-2025-4154 +5 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
May 19, 2026 GO-2025-4154 +5 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
May 13, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
May 12, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
May 6, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
May 6, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
Apr 30, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
Apr 29, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
Apr 28, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
v0
Apr 27, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
Changes in this version
type TokenParams
Apr 24, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
Apr 25, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
Apr 24, 2026 GO-2025-4154 +7 more
Alert  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api
Alert  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api
Alert  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api
Alert  GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Alert  GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api
Alert  GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api
Alert  GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Alert  GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api
Changes in this version

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL