billingexpr

Jul 7, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jul 7, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jul 7, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jul 7, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jul 6, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jul 6, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jul 3, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jun 24, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jun 20, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jun 19, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jun 18, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Jun 13, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

May 26, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

May 26, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

May 22, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

May 19, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

May 13, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

May 12, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

May 6, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

May 6, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Apr 30, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Apr 29, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Apr 28, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Apr 27, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Changes in this version

type TokenParams

+ Len float64

Apr 24, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Apr 25, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Apr 24, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4813: New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure in github.com/QuantumNous/new-api

  GO-2026-5652: QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Changes in this version

+ const DefaultExprVersion

+ func CompileFromCache(exprStr string) (*vm.Program, error)

+ func CompileFromCacheByHash(exprStr, hash string) (*vm.Program, error)

+ func ExprHashString(expr string) string

+ func ExprVersion(exprStr string) int

+ func InvalidateCache()

+ func ParseExprVersion(exprStr string) (version int, body string)

+ func QuotaRound(f float64) int

+ func UsedVars(exprStr string) map[string]bool

+ type BillingSnapshot struct

+ BillingMode string

+ EstimatedCompletionTokens int

+ EstimatedPromptTokens int

+ EstimatedQuotaAfterGroup int

+ EstimatedQuotaBeforeGroup float64

+ EstimatedTier string

+ ExprHash string

+ ExprString string

+ ExprVersion int

+ GroupRatio float64

+ ModelName string

+ QuotaPerUnit float64

+ type RequestInput struct

+ Body []byte

+ Headers map[string]string

+ type TieredResult struct

+ ActualQuotaAfterGroup int

+ ActualQuotaBeforeGroup float64

+ CrossedTier bool

+ MatchedTier string

+ func ComputeTieredQuota(snap *BillingSnapshot, params TokenParams) (TieredResult, error)

+ func ComputeTieredQuotaWithRequest(snap *BillingSnapshot, params TokenParams, request RequestInput) (TieredResult, error)

+ type TokenParams struct

+ AI float64

+ AO float64

+ C float64

+ CC float64

+ CC1h float64

+ CR float64

+ Img float64

+ ImgO float64

+ P float64

+ type TraceResult struct

+ Cost float64

+ MatchedTier string

+ func RunExpr(exprStr string, params TokenParams) (float64, TraceResult, error)

+ func RunExprByHash(exprStr, hash string, params TokenParams) (float64, TraceResult, error)

+ func RunExprByHashWithRequest(exprStr, hash string, params TokenParams, request RequestInput) (float64, TraceResult, error)

+ func RunExprWithRequest(exprStr string, params TokenParams, request RequestInput) (float64, TraceResult, error)