Affected by GO-2025-4154 and 7 other vulnerabilities

GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

GO-2026-6240: New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api

GO-2026-6242: New API: Integer overflow in quota billing yields negative charges (self-crediting) in github.com/QuantumNous/new-api

GO-2026-6243: New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass in github.com/QuantumNous/new-api

GO-2026-6244: New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api

GO-2026-6245: New API: Unauthenticated payment webhooks allow memory and disk DoS via unbounded body reads and full-body logging in github.com/QuantumNous/new-api

limiter

package

v0.13.2 Latest Latest Go to latest Published: Apr 27, 2026 License: AGPL-3.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/QuantumNous/new-api

Links

Open Source Insights

Documentation ¶

Index ¶

type Config
type Option
type RedisLimiter
- func New(ctx context.Context, r *redis.Client) *RedisLimiter
- func (rl *RedisLimiter) Allow(ctx context.Context, key string, opts ...Option) (bool, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Config ¶

type Config struct {
	Capacity  int64
	Rate      int64
	Requested int64
}

Config 配置选项模式

type Option ¶

type Option func(*Config)

func WithCapacity ¶

func WithCapacity(c int64) Option

func WithRate ¶

func WithRate(r int64) Option

func WithRequested ¶

func WithRequested(n int64) Option

type RedisLimiter ¶

type RedisLimiter struct {
	// contains filtered or unexported fields
}

func New ¶

func New(ctx context.Context, r *redis.Client) *RedisLimiter

func (*RedisLimiter) Allow ¶

func (rl *RedisLimiter) Allow(ctx context.Context, key string, opts ...Option) (bool, error)

Source Files ¶

View all Source files

limiter.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL