Moderate Security Advisories for github.com/QuantumNous/new-api in go Clear Filters
Moderate
4 days ago
New API: Redis user quota cache overwrite via PUT /api/user/self allows quota bypass
go
github.com/QuantumNous/new-api
Moderate
4 days ago
New API: Admin can reset passkeys for same-level or higher-privileged users
go
github.com/QuantumNous/new-api
Moderate
about 1 month ago
New API is vulnerable to CSRF through user email binding
go
github.com/QuantumNous/new-api
Moderate
5 months ago
New API: IDOR in VideoProxy allows cross-user video content access via missing ownership check
go
github.com/QuantumNous/new-api
Moderate
5 months ago
New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure
go
github.com/QuantumNous/new-api