github.com/QuantumNous/new-api
Go5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/QuantumNous/new-apipage 1 of 1
- CVE-2025-62155HIGHCVSS 8.5EG 8.52025-11-25
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.9.6, a recently patched SSRF vulnerability contains a bypass method that can bypass the existing security fix and s…
- CVE-2026-33655HIGHCVSS 7.7EG 7.7✓ Fixed in 0.12.0-alpha.12026-07-07
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection configuration did not apply IP filtering to hostnames; with ApplyIPFilterForDomai…
- CVE-2026-41432HIGHCVSS 7.1EG 7.1✓ Fixed in 0.12.102026-05-08
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in the Stripe webhook handler that allows an unauthenticated attacker to forge webhoo…
- CVE-2026-42339HIGHCVSS 7.1EG 7.12026-05-08
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0.9.0.5 (CVE-2025-59146) and hardened in v0.9.6 (CVE-2025-621…
- CVE-2026-44342MEDIUMCVSS 5.3EG 5.3✓ Fixed in 0.12.0-alpha.12026-07-07
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the email and WeChat account binding endpoints GET /api/oauth/email/bind and GET /api/oauth/wechat/bind used …
Check whether github.com/QuantumNous/new-api is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/QuantumNous/new-api CVEs against the assets you own.
Start Free Scan →