model

Mar 9, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 8, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 6, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 6, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 6, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 4, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 6, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 6, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 4, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 3, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 2, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 2, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 2, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 2, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Mar 1, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 28, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 28, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 28, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Changes in this version

+ const UserNameMaxLength

+ func GenerateTaskID() string

+ func RecordTaskBillingLog(params RecordTaskBillingLogParams)

type Midjourney

+ func (midjourney *Midjourney) UpdateWithStatus(fromStatus string) (bool, error)

+ type RecordTaskBillingLogParams struct

+ ChannelId int

+ Content string

+ Group string

+ LogType int

+ ModelName string

+ Other map[string]interface{}

+ Quota int

+ TokenId int

+ UserId int

type Task

+ func GetTimedOutUnfinishedTasks(cutoffUnix int64, limit int) []*Task

+ func (t *Task) GetResultURL() string

+ func (t *Task) GetUpstreamTaskID() string

+ func (t *Task) Snapshot() taskSnapshot

+ func (t *Task) UpdateWithStatus(fromStatus TaskStatus) (bool, error)

+ type TaskBillingContext struct

+ GroupRatio float64

+ ModelPrice float64

+ ModelRatio float64

+ OriginModelName string

+ OtherRatios map[string]float64

+ PerCallBilling bool

type TaskPrivateData

+ BillingContext *TaskBillingContext

+ BillingSource string

+ ResultURL string

+ SubscriptionId int

+ TokenId int

+ UpstreamTaskID string

type User

+ func (user *User) ClearBinding(bindingType string) error

Feb 25, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 24, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 24, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 23, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 23, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 22, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 22, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 22, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 22, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 22, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Changes in this version

+ func CreateUserOAuthBindingWithTx(tx *gorm.DB, binding *UserOAuthBinding) error

type CustomOAuthProvider

+ AccessDeniedMessage string

+ AccessPolicy string

+ Icon string

type Pricing

+ PricingVersion string

type User

+ func (user *User) FinalizeOAuthUserCreation(inviterId int)

+ func (user *User) InsertWithTx(tx *gorm.DB, inviterId int) error

Feb 22, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 20, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 12, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 11, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 10, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 8, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 8, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 7, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 7, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Changes in this version

+ const SubscriptionDurationCustom

+ const SubscriptionDurationDay

+ const SubscriptionDurationHour

+ const SubscriptionDurationMonth

+ const SubscriptionDurationYear

+ const SubscriptionResetCustom

+ const SubscriptionResetDaily

+ const SubscriptionResetMonthly

+ const SubscriptionResetNever

+ const SubscriptionResetWeekly

+ var ErrRedeemFailed = errors.New("redeem.failed")

+ var ErrSubscriptionOrderNotFound = errors.New("subscription order not found")

+ var ErrSubscriptionOrderStatusInvalid = errors.New("subscription order status invalid")

+ func AdminBindSubscription(userId int, planId int, sourceNote string) (string, error)

+ func AdminDeleteUserSubscription(userSubscriptionId int) (string, error)

+ func AdminInvalidateUserSubscription(userSubscriptionId int) (string, error)

+ func CleanupSubscriptionPreConsumeRecords(olderThanSeconds int64) (int64, error)

+ func CompleteSubscriptionOrder(tradeNo string, providerPayload string) error

+ func CountUserSubscriptionsByPlan(userId int, planId int) (int64, error)

+ func CreateCustomOAuthProvider(provider *CustomOAuthProvider) error

+ func CreateUserOAuthBinding(binding *UserOAuthBinding) error

+ func DeleteCustomOAuthProvider(id int) error

+ func DeleteUserOAuthBinding(userId, providerId int) error

+ func DeleteUserOAuthBindingsByUserId(userId int) error

+ func ExpireDueSubscriptions(limit int) (int, error)

+ func ExpireSubscriptionOrder(tradeNo string) error

+ func GetBindingCountByProviderId(providerId int) (int64, error)

+ func GetDBTimestamp() int64

+ func GetUserLanguage(userId int) string

+ func HasActiveUserSubscription(userId int) (bool, error)

+ func InvalidateSubscriptionPlanCache(planId int)

+ func IsProviderUserIdTaken(providerId int, providerUserId string) bool

+ func IsSlugTaken(slug string, excludeId int) bool

+ func NormalizeResetPeriod(period string) string

+ func PostConsumeUserSubscriptionDelta(userSubscriptionId int, delta int64) error

+ func RefundSubscriptionPreConsume(requestId string) error

+ func ResetDueSubscriptions(limit int) (int, error)

+ func UpdateCustomOAuthProvider(provider *CustomOAuthProvider) error

+ func UpdateUserGroupCache(userId int, group string) error

+ func UpdateUserOAuthBinding(userId, providerId int, newProviderUserId string) error

+ type CustomOAuthProvider struct

+ AuthStyle int

+ AuthorizationEndpoint string

+ ClientId string

+ ClientSecret string

+ CreatedAt time.Time

+ DisplayNameField string

+ EmailField string

+ Enabled bool

+ Id int

+ Name string

+ Scopes string

+ Slug string

+ TokenEndpoint string

+ UpdatedAt time.Time

+ UserIdField string

+ UserInfoEndpoint string

+ UsernameField string

+ WellKnown string

+ func GetAllCustomOAuthProviders() ([]*CustomOAuthProvider, error)

+ func GetCustomOAuthProviderById(id int) (*CustomOAuthProvider, error)

+ func GetCustomOAuthProviderBySlug(slug string) (*CustomOAuthProvider, error)

+ func GetEnabledCustomOAuthProviders() ([]*CustomOAuthProvider, error)

+ func (CustomOAuthProvider) TableName() string

type Log

+ RequestId string

+ func GetLogByTokenId(tokenId int) (logs []*Log, err error)

+ type SubscriptionOrder struct

+ CompleteTime int64

+ CreateTime int64

+ Id int

+ Money float64

+ PaymentMethod string

+ PlanId int

+ ProviderPayload string

+ Status string

+ TradeNo string

+ UserId int

+ func GetSubscriptionOrderByTradeNo(tradeNo string) *SubscriptionOrder

+ func (o *SubscriptionOrder) Insert() error

+ func (o *SubscriptionOrder) Update() error

+ type SubscriptionPlan struct

+ CreatedAt int64

+ CreemProductId string

+ Currency string

+ CustomSeconds int64

+ DurationUnit string

+ DurationValue int

+ Enabled bool

+ Id int

+ MaxPurchasePerUser int

+ PriceAmount float64

+ QuotaResetCustomSeconds int64

+ QuotaResetPeriod string

+ SortOrder int

+ StripePriceId string

+ Subtitle string

+ Title string

+ TotalAmount int64

+ UpdatedAt int64

+ UpgradeGroup string

+ func GetSubscriptionPlanById(id int) (*SubscriptionPlan, error)

+ func (p *SubscriptionPlan) BeforeCreate(tx *gorm.DB) error

+ func (p *SubscriptionPlan) BeforeUpdate(tx *gorm.DB) error

+ type SubscriptionPlanInfo struct

+ PlanId int

+ PlanTitle string

+ func GetSubscriptionPlanInfoByUserSubscriptionId(userSubscriptionId int) (*SubscriptionPlanInfo, error)

+ type SubscriptionPreConsumeRecord struct

+ CreatedAt int64

+ Id int

+ PreConsumed int64

+ RequestId string

+ Status string

+ UpdatedAt int64

+ UserId int

+ UserSubscriptionId int

+ func (r *SubscriptionPreConsumeRecord) BeforeCreate(tx *gorm.DB) error

+ func (r *SubscriptionPreConsumeRecord) BeforeUpdate(tx *gorm.DB) error

+ type SubscriptionPreConsumeResult struct

+ AmountTotal int64

+ AmountUsedAfter int64

+ AmountUsedBefore int64

+ PreConsumed int64

+ UserSubscriptionId int

+ func PreConsumeUserSubscription(requestId string, userId int, modelName string, quotaType int, amount int64) (*SubscriptionPreConsumeResult, error)

+ type SubscriptionSummary struct

+ Subscription *UserSubscription

+ func GetAllActiveUserSubscriptions(userId int) ([]SubscriptionSummary, error)

+ func GetAllUserSubscriptions(userId int) ([]SubscriptionSummary, error)

type Task

+ Username string

type User

+ func GetUserByOAuthBinding(providerId int, providerUserId string) (*User, error)

+ func (user *User) UpdateGitHubId(newGitHubId string) error

+ type UserOAuthBinding struct

+ CreatedAt time.Time

+ Id int

+ ProviderId int

+ ProviderUserId string

+ UserId int

+ func GetUserOAuthBinding(userId, providerId int) (*UserOAuthBinding, error)

+ func GetUserOAuthBindingsByUserId(userId int) ([]*UserOAuthBinding, error)

+ func (UserOAuthBinding) TableName() string

+ type UserSubscription struct

+ AmountTotal int64

+ AmountUsed int64

+ CreatedAt int64

+ EndTime int64

+ Id int

+ LastResetTime int64

+ NextResetTime int64

+ PlanId int

+ PrevUserGroup string

+ Source string

+ StartTime int64

+ Status string

+ UpdatedAt int64

+ UpgradeGroup string

+ UserId int

+ func CreateUserSubscriptionFromPlanTx(tx *gorm.DB, userId int, plan *SubscriptionPlan, source string) (*UserSubscription, error)

+ func (s *UserSubscription) BeforeCreate(tx *gorm.DB) error

+ func (s *UserSubscription) BeforeUpdate(tx *gorm.DB) error

Feb 6, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 6, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 6, 2026 GO-2025-4154

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

Feb 6, 2026 GO-2025-4154 +1 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

Feb 5, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Feb 4, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Feb 4, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Feb 4, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Feb 3, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Feb 3, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Feb 3, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Feb 3, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Feb 3, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Changes in this version

+ const BatchUpdateTypeChannelUsedQuota

+ const BatchUpdateTypeCount

+ const BatchUpdateTypeRequestCount

+ const BatchUpdateTypeTokenQuota

+ const BatchUpdateTypeUsedQuota

+ const BatchUpdateTypeUserQuota

+ const LogTypeConsume

+ const LogTypeError

+ const LogTypeManage

+ const LogTypeRefund

+ const LogTypeSystem

+ const LogTypeTopup

+ const LogTypeUnknown

+ const NameRuleContains

+ const NameRuleExact

+ const NameRulePrefix

+ const NameRuleSuffix

+ const TaskStatusFailure

+ const TaskStatusInProgress

+ const TaskStatusNotStart

+ const TaskStatusQueued

+ const TaskStatusSubmitted

+ const TaskStatusSuccess

+ const TaskStatusUnknown

+ var CacheQuotaData = make(map[string]*QuotaData)

+ var CacheQuotaDataLock = sync.Mutex

+ var DB *gorm.DB

+ var ErrFriendlyPasskeyNotFound = errors.New("Passkey 验证失败，请重试或联系管理员")

+ var ErrPasskeyNotFound = errors.New("passkey credential not found")

+ var ErrTwoFANotEnabled = errors.New("用户未启用2FA")

+ var LOG_DB *gorm.DB

+ func BatchDeleteChannels(ids []int) error

+ func BatchDeleteTokens(ids []int, userId int) (int, error)

+ func BatchInsertChannels(channels []Channel) error

+ func BatchSetChannelTag(ids []int, tag *string) error

+ func CacheUpdateChannel(channel *Channel)

+ func CacheUpdateChannelStatus(id int, status int)

+ func CheckSetup()

+ func CheckUserExistOrDeleted(username string, email string) (bool, error)

+ func CleanupChannelPollingLocks()

+ func CloseDB() error

+ func CountAllChannels() (int64, error)

+ func CountAllTags() (int64, error)

+ func CountAllTasks(queryParams TaskQueryParams) int64

+ func CountAllUserTask(userId int, queryParams TaskQueryParams) int64

+ func CountChannelsByType(channelType int) (int64, error)

+ func CountChannelsGroupByType() (map[int64]int64, error)

+ func CountUserTokens(userId int) (int64, error)

+ func CreateBackupCodes(userId int, codes []string) error

+ func DecreaseTokenQuota(id int, key string, quota int) (err error)

+ func DecreaseUserQuota(id int, quota int) (err error)

+ func DeleteChannelByStatus(status int64) (int64, error)

+ func DeleteDisabledChannel() (int64, error)

+ func DeleteInvalidRedemptions() (int64, error)

+ func DeleteOldLog(ctx context.Context, targetTimestamp int64, limit int) (int64, error)

+ func DeletePasskeyByUserID(userID int) error

+ func DeletePrefillGroupByID(id int) error

+ func DeleteRedemptionById(id int) (err error)

+ func DeleteTokenById(id int, userId int) (err error)

+ func DeleteUserById(id int) (err error)

+ func DeltaUpdateUserQuota(id int, delta int) (err error)

+ func DisableChannelByTag(tag string) error

+ func DisableModelLimits(tokenId int) error

+ func DisableTwoFA(userId int) error

+ func EditChannelByTag(tag string, newTag *string, modelMapping *string, models *string, ...) error

+ func EnableChannelByTag(tag string) error

+ func FixAbility() (int, int, error)

+ func GetBoundChannelsByModelsMap(modelNames []string) (map[string][]BoundChannel, error)

+ func GetChannelPollingLock(channelId int) *sync.Mutex

+ func GetEnabledModels() []string

+ func GetGroupEnabledModels(group string) []string

+ func GetMaxUserId() int

+ func GetMissingModels() ([]string, error)

+ func GetModelEnableGroups(modelName string) []string

+ func GetModelQuotaTypes(modelName string) []int

+ func GetModelSupportEndpointTypes(model string) []constant.EndpointType

+ func GetPaginatedTags(offset int, limit int) ([]*string, error)

+ func GetSupportedEndpointMap() map[string]common.EndpointInfo

+ func GetTwoFAStats() (map[string]interface{}, error)

+ func GetUnusedBackupCodeCount(userId int) (int, error)

+ func GetUserCheckinStats(userId int, month string) (map[string]interface{}, error)

+ func GetUserEmail(id int) (email string, err error)

+ func GetUserGroup(id int, fromDB bool) (group string, err error)

+ func GetUserIdByAffCode(affCode string) (int, error)

+ func GetUserQuota(id int, fromDB bool) (quota int, err error)

+ func GetUserSetting(id int, fromDB bool) (settingMap dto.UserSetting, err error)

+ func GetUserUsedQuota(id int) (quota int, err error)

+ func GetUsernameById(id int, fromDB bool) (username string, err error)

+ func GetVendorModelCounts() (map[int64]int64, error)

+ func HardDeleteUserById(id int) error

+ func HasCheckedInToday(userId int) (bool, error)

+ func IncreaseTokenQuota(id int, key string, quota int) (err error)

+ func IncreaseUserQuota(id int, quota int, db bool) (err error)

+ func InitBatchUpdater()

+ func InitChannelCache()

+ func InitDB() (err error)

+ func InitLogDB() (err error)

+ func InitOptionMap()

+ func IsAdmin(userId int) bool

+ func IsChannelEnabledForAnyGroupModel(groups []string, modelName string, channelID int) bool

+ func IsChannelEnabledForGroupModel(group string, modelName string, channelID int) bool

+ func IsDiscordIdAlreadyTaken(discordId string) bool

+ func IsEmailAlreadyTaken(email string) bool

+ func IsGitHubIdAlreadyTaken(githubId string) bool

+ func IsLinuxDOIdAlreadyTaken(linuxDOId string) bool

+ func IsModelNameDuplicated(id int, name string) (bool, error)

+ func IsOidcIdAlreadyTaken(oidcId string) bool

+ func IsPrefillGroupNameDuplicated(id int, name string) (bool, error)

+ func IsTelegramIdAlreadyTaken(telegramId string) bool

+ func IsTwoFAEnabled(userId int) bool

+ func IsVendorNameDuplicated(id int, name string) (bool, error)

+ func IsWeChatIdAlreadyTaken(wechatId string) bool

+ func LogQuotaData(userId int, username string, modelName string, quota int, createdAt int64, ...)

+ func ManualCompleteTopUp(tradeNo string) error

+ func MjBulkUpdate(mjIds []string, params map[string]any) error

+ func MjBulkUpdateByTaskIds(taskIDs []int, params map[string]any) error

+ func PingDB() error

+ func Recharge(referenceId string, customerId string) (err error)

+ func RechargeCreem(referenceId string, customerEmail string, customerName string) (err error)

+ func RecordConsumeLog(c *gin.Context, userId int, params RecordConsumeLogParams)

+ func RecordErrorLog(c *gin.Context, userId int, channelId int, modelName string, tokenName string, ...)

+ func RecordExist(err error) (bool, error)

+ func RecordLog(userId int, logType int, content string)

+ func Redeem(key string, userId int) (quota int, err error)

+ func RefreshPricing()

+ func ResetUserPasswordByEmail(email string, password string) error

+ func RootUserExists() bool

+ func SaveQuotaDataCache()

+ func SearchTags(keyword string, group string, model string, idSort bool) ([]*string, error)

+ func SumUsedToken(logType int, startTimestamp int64, endTimestamp int64, modelName string, ...) (token int)

+ func SyncChannelCache(frequency int)

+ func SyncOptions(frequency int)

+ func TaskBulkUpdate(TaskIds []string, params map[string]any) error

+ func TaskBulkUpdateByID(ids []int64, params map[string]any) error

+ func TaskBulkUpdateByTaskIds(taskIDs []int64, params map[string]any) error

+ func TaskCountAllTasks(queryParams SyncTaskQueryParams) int64

+ func TaskCountAllUserTask(userId int, queryParams SyncTaskQueryParams) int64

+ func TaskUpdateProgress(id int64, progress string) error

+ func UpdateAbilityByTag(tag string, newTag *string, priority *int64, weight *uint) error

+ func UpdateAbilityStatus(channelId int, status bool) error

+ func UpdateAbilityStatusByTag(tag string, status bool) error

+ func UpdateChannelStatus(channelId int, usingKey string, status int, reason string) bool

+ func UpdateChannelUsedQuota(id int, quota int)

+ func UpdateOption(key string, value string) error

+ func UpdateProgress(id int, progress string) error

+ func UpdateQuotaData()

+ func UpdateUserUsedQuotaAndRequestCount(id int, quota int)

+ func UpsertPasskeyCredential(credential *PasskeyCredential) error

+ func ValidateBackupCode(userId int, code string) (bool, error)

+ type Ability struct

+ ChannelId int

+ Enabled bool

+ Group string

+ Model string

+ Priority *int64

+ Tag *string

+ Weight uint

+ func GetAllEnableAbilities() []Ability

+ type AbilityWithChannel struct

+ ChannelType int

+ func GetAllEnableAbilityWithChannels() ([]AbilityWithChannel, error)

+ type BoundChannel struct

+ Name string

+ Type int

+ type Channel struct

+ AutoBan *int

+ Balance float64

+ BalanceUpdatedTime int64

+ BaseURL *string

+ ChannelInfo ChannelInfo

+ CreatedTime int64

+ Group string

+ HeaderOverride *string

+ Id int

+ Key string

+ Keys []string

+ ModelMapping *string

+ Models string

+ Name string

+ OpenAIOrganization *string

+ Other string

+ OtherInfo string

+ OtherSettings string

+ ParamOverride *string

+ Priority *int64

+ Remark *string

+ ResponseTime int

+ Setting *string

+ Status int

+ StatusCodeMapping *string

+ Tag *string

+ TestModel *string

+ TestTime int64

+ Type int

+ UsedQuota int64

+ Weight *uint

+ func CacheGetChannel(id int) (*Channel, error)

+ func GetAllChannels(startIdx int, num int, selectAll bool, idSort bool) ([]*Channel, error)

+ func GetChannel(group string, model string, retry int) (*Channel, error)

+ func GetChannelById(id int, selectAll bool) (*Channel, error)

+ func GetChannelsByIds(ids []int) ([]*Channel, error)

+ func GetChannelsByTag(tag string, idSort bool, selectAll bool) ([]*Channel, error)

+ func GetChannelsByType(startIdx int, num int, idSort bool, channelType int) ([]*Channel, error)

+ func GetRandomSatisfiedChannel(group string, model string, retry int) (*Channel, error)

+ func SearchChannels(keyword string, group string, model string, idSort bool) ([]*Channel, error)

+ func (channel *Channel) AddAbilities(tx *gorm.DB) error

+ func (channel *Channel) Delete() error

+ func (channel *Channel) DeleteAbilities() error

+ func (channel *Channel) GetAutoBan() bool

+ func (channel *Channel) GetBaseURL() string

+ func (channel *Channel) GetGroups() []string

+ func (channel *Channel) GetHeaderOverride() map[string]interface{}

+ func (channel *Channel) GetKeys() []string

+ func (channel *Channel) GetModelMapping() string

+ func (channel *Channel) GetModels() []string

+ func (channel *Channel) GetNextEnabledKey() (string, int, *types.NewAPIError)

+ func (channel *Channel) GetOtherInfo() map[string]interface{}

+ func (channel *Channel) GetOtherSettings() dto.ChannelOtherSettings

+ func (channel *Channel) GetParamOverride() map[string]interface{}

+ func (channel *Channel) GetPriority() int64

+ func (channel *Channel) GetSetting() dto.ChannelSettings

+ func (channel *Channel) GetStatusCodeMapping() string

+ func (channel *Channel) GetTag() string

+ func (channel *Channel) GetWeight() int

+ func (channel *Channel) Insert() error

+ func (channel *Channel) Save() error

+ func (channel *Channel) SaveChannelInfo() error

+ func (channel *Channel) SaveWithoutKey() error

+ func (channel *Channel) SetOtherInfo(otherInfo map[string]interface{})

+ func (channel *Channel) SetOtherSettings(setting dto.ChannelOtherSettings)

+ func (channel *Channel) SetSetting(setting dto.ChannelSettings)

+ func (channel *Channel) SetTag(tag string)

+ func (channel *Channel) Update() error

+ func (channel *Channel) UpdateAbilities(tx *gorm.DB) error

+ func (channel *Channel) UpdateBalance(balance float64)

+ func (channel *Channel) UpdateResponseTime(responseTime int64)

+ func (channel *Channel) ValidateSettings() error

+ type ChannelInfo struct

+ IsMultiKey bool

+ MultiKeyDisabledReason map[int]string

+ MultiKeyDisabledTime map[int]int64

+ MultiKeyMode constant.MultiKeyMode

+ MultiKeyPollingIndex int

+ MultiKeySize int

+ MultiKeyStatusList map[int]int

+ func CacheGetChannelInfo(id int) (*ChannelInfo, error)

+ func (c *ChannelInfo) Scan(value interface{}) error

+ func (c ChannelInfo) Value() (driver.Value, error)

+ type Checkin struct

+ CheckinDate string

+ CreatedAt int64

+ Id int

+ QuotaAwarded int

+ UserId int

+ func GetUserCheckinRecords(userId int, startDate, endDate string) ([]Checkin, error)

+ func UserCheckin(userId int) (*Checkin, error)

+ func (Checkin) TableName() string

+ type CheckinRecord struct

+ CheckinDate string

+ QuotaAwarded int

+ type JSONValue json.RawMessage

+ func (j *JSONValue) Scan(value interface{}) error

+ func (j *JSONValue) UnmarshalJSON(data []byte) error

+ func (j JSONValue) MarshalJSON() ([]byte, error)

+ func (j JSONValue) Value() (driver.Value, error)

+ type Log struct

+ ChannelId int

+ ChannelName string

+ CompletionTokens int

+ Content string

+ CreatedAt int64

+ Group string

+ Id int

+ Ip string

+ IsStream bool

+ ModelName string

+ Other string

+ PromptTokens int

+ Quota int

+ TokenId int

+ TokenName string

+ Type int

+ UseTime int

+ UserId int

+ Username string

+ func GetAllLogs(logType int, startTimestamp int64, endTimestamp int64, modelName string, ...) (logs []*Log, total int64, err error)

+ func GetLogByKey(key string) (logs []*Log, err error)

+ func GetUserLogs(userId int, logType int, startTimestamp int64, endTimestamp int64, ...) (logs []*Log, total int64, err error)

+ func SearchAllLogs(keyword string) (logs []*Log, err error)

+ func SearchUserLogs(userId int, keyword string) (logs []*Log, err error)

+ type Midjourney struct

+ Action string

+ Buttons string

+ ChannelId int

+ Code int

+ Description string

+ FailReason string

+ FinishTime int64

+ Id int

+ ImageUrl string

+ MjId string

+ Progress string

+ Prompt string

+ PromptEn string

+ Properties string

+ Quota int

+ StartTime int64

+ State string

+ Status string

+ SubmitTime int64

+ UserId int

+ VideoUrl string

+ VideoUrls string

+ func GetAllTasks(startIdx int, num int, queryParams TaskQueryParams) []*Midjourney

+ func GetAllUnFinishTasks() []*Midjourney

+ func GetAllUserTask(userId int, startIdx int, num int, queryParams TaskQueryParams) []*Midjourney

+ func GetByMJId(userId int, mjId string) *Midjourney

+ func GetByMJIds(userId int, mjIds []string) []*Midjourney

+ func GetByOnlyMJId(mjId string) *Midjourney

+ func GetMjByuId(id int) *Midjourney

+ func (midjourney *Midjourney) Insert() error

+ func (midjourney *Midjourney) Update() error

+ type Model struct

+ BoundChannels []BoundChannel

+ CreatedTime int64

+ DeletedAt gorm.DeletedAt

+ Description string

+ EnableGroups []string

+ Endpoints string

+ Icon string

+ Id int

+ MatchedCount int

+ MatchedModels []string

+ ModelName string

+ NameRule int

+ QuotaTypes []int

+ Status int

+ SyncOfficial int

+ Tags string

+ UpdatedTime int64

+ VendorID int

+ func GetAllModels(offset int, limit int) ([]*Model, error)

+ func SearchModels(keyword string, vendor string, offset int, limit int) ([]*Model, int64, error)

+ func (mi *Model) Delete() error

+ func (mi *Model) Insert() error

+ func (mi *Model) Update() error

+ type Option struct

+ Key string

+ Value string

+ func AllOption() ([]*Option, error)

+ type PasskeyCredential struct

+ AAGUID string

+ Attachment string

+ AttestationType string

+ BackupEligible bool

+ BackupState bool

+ CloneWarning bool

+ CreatedAt time.Time

+ CredentialID string

+ DeletedAt gorm.DeletedAt

+ ID int

+ LastUsedAt *time.Time

+ PublicKey string

+ SignCount uint32

+ Transports string

+ UpdatedAt time.Time

+ UserID int

+ UserPresent bool

+ UserVerified bool

+ func GetPasskeyByCredentialID(credentialID []byte) (*PasskeyCredential, error)

+ func GetPasskeyByUserID(userID int) (*PasskeyCredential, error)

+ func NewPasskeyCredentialFromWebAuthn(userID int, credential *webauthn.Credential) *PasskeyCredential

+ func (p *PasskeyCredential) ApplyValidatedCredential(credential *webauthn.Credential)

+ func (p *PasskeyCredential) SetTransports(list []protocol.AuthenticatorTransport)

+ func (p *PasskeyCredential) ToWebAuthnCredential() webauthn.Credential

+ func (p *PasskeyCredential) TransportList() []protocol.AuthenticatorTransport

+ type PrefillGroup struct

+ CreatedTime int64

+ DeletedAt gorm.DeletedAt

+ Description string

+ Id int

+ Items JSONValue

+ Name string

+ Type string

+ UpdatedTime int64

+ func GetAllPrefillGroups(groupType string) ([]*PrefillGroup, error)

+ func (g *PrefillGroup) Insert() error

+ func (g *PrefillGroup) Update() error

+ type Pricing struct

+ CompletionRatio float64

+ Description string

+ EnableGroup []string

+ Icon string

+ ModelName string

+ ModelPrice float64

+ ModelRatio float64

+ OwnerBy string

+ QuotaType int

+ SupportedEndpointTypes []constant.EndpointType

+ Tags string

+ VendorID int

+ func GetPricing() []Pricing

+ type PricingVendor struct

+ Description string

+ ID int

+ Icon string

+ Name string

+ func GetVendors() []PricingVendor

+ type Properties struct

+ Input string

+ OriginModelName string

+ UpstreamModelName string

+ func (m *Properties) Scan(val interface{}) error

+ func (m Properties) Value() (driver.Value, error)

+ type QuotaData struct

+ Count int

+ CreatedAt int64

+ Id int

+ ModelName string

+ Quota int

+ TokenUsed int

+ UserID int

+ Username string

+ func GetAllQuotaDates(startTime int64, endTime int64, username string) (quotaData []*QuotaData, err error)

+ func GetQuotaDataByUserId(userId int, startTime int64, endTime int64) (quotaData []*QuotaData, err error)

+ func GetQuotaDataByUsername(username string, startTime int64, endTime int64) (quotaData []*QuotaData, err error)

+ type RecordConsumeLogParams struct

+ ChannelId int

+ CompletionTokens int

+ Content string

+ Group string

+ IsStream bool

+ ModelName string

+ Other map[string]interface{}

+ PromptTokens int

+ Quota int

+ TokenId int

+ TokenName string

+ UseTimeSeconds int

+ type Redemption struct

+ Count int

+ CreatedTime int64

+ DeletedAt gorm.DeletedAt

+ ExpiredTime int64

+ Id int

+ Key string

+ Name string

+ Quota int

+ RedeemedTime int64

+ Status int

+ UsedUserId int

+ UserId int

+ func GetAllRedemptions(startIdx int, num int) (redemptions []*Redemption, total int64, err error)

+ func GetRedemptionById(id int) (*Redemption, error)

+ func SearchRedemptions(keyword string, startIdx int, num int) (redemptions []*Redemption, total int64, err error)

+ func (redemption *Redemption) Delete() error

+ func (redemption *Redemption) Insert() error

+ func (redemption *Redemption) SelectUpdate() error

+ func (redemption *Redemption) Update() error

+ type Setup struct

+ ID uint

+ InitializedAt int64

+ Version string

+ func GetSetup() *Setup

+ type Stat struct

+ Quota int

+ Rpm int

+ Tpm int

+ func SumUsedQuota(logType int, startTimestamp int64, endTimestamp int64, modelName string, ...) (stat Stat)

+ type SyncTaskQueryParams struct

+ Action string

+ ChannelID string

+ EndTimestamp int64

+ Platform constant.TaskPlatform

+ StartTimestamp int64

+ Status string

+ TaskID string

+ UserID string

+ UserIDs []int

+ type Task struct

+ Action string

+ ChannelId int

+ CreatedAt int64

+ Data json.RawMessage

+ FailReason string

+ FinishTime int64

+ Group string

+ ID int64

+ Platform constant.TaskPlatform

+ PrivateData TaskPrivateData

+ Progress string

+ Properties Properties

+ Quota int

+ StartTime int64

+ Status TaskStatus

+ SubmitTime int64

+ TaskID string

+ UpdatedAt int64

+ UserId int

+ func GetAllUnFinishSyncTasks(limit int) []*Task

+ func GetByOnlyTaskId(taskId string) (*Task, bool, error)

+ func GetByTaskId(userId int, taskId string) (*Task, bool, error)

+ func GetByTaskIds(userId int, taskIds []any) ([]*Task, error)

+ func InitTask(platform constant.TaskPlatform, relayInfo *commonRelay.RelayInfo) *Task

+ func TaskGetAllTasks(startIdx int, num int, queryParams SyncTaskQueryParams) []*Task

+ func TaskGetAllUserTask(userId int, startIdx int, num int, queryParams SyncTaskQueryParams) []*Task

+ func (Task *Task) Insert() error

+ func (Task *Task) Update() error

+ func (t *Task) GetData(v any) error

+ func (t *Task) SetData(data any)

+ func (t *Task) ToOpenAIVideo() *dto.OpenAIVideo

+ type TaskPrivateData struct

+ Key string

+ func (p *TaskPrivateData) Scan(val interface{}) error

+ func (p TaskPrivateData) Value() (driver.Value, error)

+ type TaskQueryParams struct

+ ChannelID string

+ EndTimestamp string

+ MjID string

+ StartTimestamp string

+ type TaskQuotaUsage struct

+ Count float64

+ Mode string

+ func SumUsedTaskQuota(queryParams SyncTaskQueryParams) (stat []TaskQuotaUsage, err error)

+ type TaskStatus string

+ func (t TaskStatus) ToVideoStatus() string

+ type Token struct

+ AccessedTime int64

+ AllowIps *string

+ CreatedTime int64

+ CrossGroupRetry bool

+ DeletedAt gorm.DeletedAt

+ ExpiredTime int64

+ Group string

+ Id int

+ Key string

+ ModelLimits string

+ ModelLimitsEnabled bool

+ Name string

+ RemainQuota int

+ Status int

+ UnlimitedQuota bool

+ UsedQuota int

+ UserId int

+ func GetAllUserTokens(userId int, startIdx int, num int) ([]*Token, error)

+ func GetTokenById(id int) (*Token, error)

+ func GetTokenByIds(id int, userId int) (*Token, error)

+ func GetTokenByKey(key string, fromDB bool) (token *Token, err error)

+ func SearchUserTokens(userId int, keyword string, token string) (tokens []*Token, err error)

+ func ValidateUserToken(key string) (token *Token, err error)

+ func (token *Token) Clean()

+ func (token *Token) Delete() (err error)

+ func (token *Token) GetIpLimits() []string

+ func (token *Token) GetModelLimits() []string

+ func (token *Token) GetModelLimitsMap() map[string]bool

+ func (token *Token) Insert() error

+ func (token *Token) IsModelLimitsEnabled() bool

+ func (token *Token) SelectUpdate() (err error)

+ func (token *Token) Update() (err error)

+ type TopUp struct

+ Amount int64

+ CompleteTime int64

+ CreateTime int64

+ Id int

+ Money float64

+ PaymentMethod string

+ Status string

+ TradeNo string

+ UserId int

+ func GetAllTopUps(pageInfo *common.PageInfo) (topups []*TopUp, total int64, err error)

+ func GetTopUpById(id int) *TopUp

+ func GetTopUpByTradeNo(tradeNo string) *TopUp

+ func GetUserTopUps(userId int, pageInfo *common.PageInfo) (topups []*TopUp, total int64, err error)

+ func SearchAllTopUps(keyword string, pageInfo *common.PageInfo) (topups []*TopUp, total int64, err error)

+ func SearchUserTopUps(userId int, keyword string, pageInfo *common.PageInfo) (topups []*TopUp, total int64, err error)

+ func (topUp *TopUp) Insert() error

+ func (topUp *TopUp) Update() error

+ type TwoFA struct

+ CreatedAt time.Time

+ DeletedAt gorm.DeletedAt

+ FailedAttempts int

+ Id int

+ IsEnabled bool

+ LastUsedAt *time.Time

+ LockedUntil *time.Time

+ Secret string

+ UpdatedAt time.Time

+ UserId int

+ func GetTwoFAByUserId(userId int) (*TwoFA, error)

+ func (t *TwoFA) Create() error

+ func (t *TwoFA) Delete() error

+ func (t *TwoFA) Enable() error

+ func (t *TwoFA) IncrementFailedAttempts() error

+ func (t *TwoFA) IsLocked() bool

+ func (t *TwoFA) ResetFailedAttempts() error

+ func (t *TwoFA) Update() error

+ func (t *TwoFA) ValidateBackupCodeAndUpdateUsage(code string) (bool, error)

+ func (t *TwoFA) ValidateTOTPAndUpdateUsage(code string) (bool, error)

+ type TwoFABackupCode struct

+ CodeHash string

+ CreatedAt time.Time

+ DeletedAt gorm.DeletedAt

+ Id int

+ IsUsed bool

+ UsedAt *time.Time

+ UserId int

+ type User struct

+ AccessToken *string

+ AffCode string

+ AffCount int

+ AffHistoryQuota int

+ AffQuota int

+ DeletedAt gorm.DeletedAt

+ DiscordId string

+ DisplayName string

+ Email string

+ GitHubId string

+ Group string

+ Id int

+ InviterId int

+ LinuxDOId string

+ OidcId string

+ OriginalPassword string

+ Password string

+ Quota int

+ Remark string

+ RequestCount int

+ Role int

+ Setting string

+ Status int

+ StripeCustomer string

+ TelegramId string

+ UsedQuota int

+ Username string

+ VerificationCode string

+ WeChatId string

+ func GetAllUsers(pageInfo *common.PageInfo) (users []*User, total int64, err error)

+ func GetRootUser() (user *User)

+ func GetUserById(id int, selectAll bool) (*User, error)

+ func SearchUsers(keyword string, group string, startIdx int, num int) ([]*User, int64, error)

+ func ValidateAccessToken(token string) (user *User)

+ func (user *User) Delete() error

+ func (user *User) Edit(updatePassword bool) error

+ func (user *User) FillUserByDiscordId() error

+ func (user *User) FillUserByEmail() error

+ func (user *User) FillUserByGitHubId() error

+ func (user *User) FillUserById() error

+ func (user *User) FillUserByLinuxDOId() error

+ func (user *User) FillUserByOidcId() error

+ func (user *User) FillUserByTelegramId() error

+ func (user *User) FillUserByWeChatId() error

+ func (user *User) GetAccessToken() string

+ func (user *User) GetSetting() dto.UserSetting

+ func (user *User) HardDelete() error

+ func (user *User) Insert(inviterId int) error

+ func (user *User) SetAccessToken(token string)

+ func (user *User) SetSetting(setting dto.UserSetting)

+ func (user *User) ToBaseUser() *UserBase

+ func (user *User) TransferAffQuotaToQuota(quota int) error

+ func (user *User) Update(updatePassword bool) error

+ func (user *User) ValidateAndFill() (err error)

+ type UserBase struct

+ Email string

+ Group string

+ Id int

+ Quota int

+ Setting string

+ Status int

+ Username string

+ func GetUserCache(userId int) (userCache *UserBase, err error)

+ func (user *UserBase) GetSetting() dto.UserSetting

+ func (user *UserBase) WriteContext(c *gin.Context)

+ type Vendor struct

+ CreatedTime int64

+ DeletedAt gorm.DeletedAt

+ Description string

+ Icon string

+ Id int

+ Name string

+ Status int

+ UpdatedTime int64

+ func GetAllVendors(offset int, limit int) ([]*Vendor, error)

+ func GetVendorByID(id int) (*Vendor, error)

+ func SearchVendors(keyword string, offset int, limit int) ([]*Vendor, int64, error)

+ func (v *Vendor) Delete() error

+ func (v *Vendor) Insert() error

+ func (v *Vendor) Update() error

Jan 29, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Jan 26, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Jan 21, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Jan 14, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Jan 12, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Jan 11, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Jan 5, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Jan 3, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 28, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Jan 2, 2026 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 30, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 29, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 26, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 25, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 21, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 20, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 13, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 13, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 13, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 12, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 12, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 12, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 12, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 11, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 9, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 2, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 2, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Dec 1, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 30, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 30, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 30, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 23, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 20, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 20, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 16, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 18, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 14, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 11, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 12, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 11, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 10, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 7, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 6, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 3, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 5, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 31, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Nov 1, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 31, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 29, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 30, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 29, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 29, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 29, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 28, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 18, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 15, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 17, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 16, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 16, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 15, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 15, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 15, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 15, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 14, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 14, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 12, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 13, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Oct 12, 2025 GO-2025-4154 +2 more

  GO-2025-4154: new-api is vulnerable to SSRF Bypass in one-api

  GO-2026-4531: New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api

  GO-2026-4532: New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api