Skip to content
OpenAdvisories

Package · Go

github.com/QuantumNous/new-api

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-71479

    New API: Integer overflow in quota billing yields negative charges (self-crediting)

    New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, max_tokens, max_completion_tokens, maxOutputTokens, audio duration, and billing…

    QuantumNous new-api github.com/QuantumNous/new-api Go
  • Critical 9.1
    CVE-2026-64859

    New API: User List API Leaks Root User Access Token Leading to Privilege Escalation

    New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user list and user lookup APIs, including GET /api/user/, return User.AccessToken as access_token because User model object…

    QuantumNous new-api github.com/QuantumNous/new-api Go