Security Advisories for github.com/QuantumNous/new-api in go
High
24 days ago
QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0
go
github.com/QuantumNous/new-api
High
about 1 month ago
New API: Stripe Webhook Signature Bypass via Empty Secret Enables Unlimited Quota Fraud
go
github.com/QuantumNous/new-api
Moderate
2 months ago
New API: IDOR in VideoProxy allows cross-user video content access via missing ownership check
go
github.com/QuantumNous/new-api
Moderate
2 months ago
New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure
go
github.com/QuantumNous/new-api
High
3 months ago
New API has Potential XSS in its MarkdownRenderer component
go
github.com/QuantumNous/new-api
High
3 months ago
New API has an SQL LIKE Wildcard Injection DoS via Token Search
go
github.com/QuantumNous/new-api