Skip to content
OpenAdvisories

Package · Go

github.com/songquanpeng/one-api

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.1
    CVE-2026-11465

    songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error

    A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic erro…

    songquanpeng one-api github.com/songquanpeng/one-api Go
  • Low 2.4
    CVE-2025-3801

    songquanpeng one-api System Setting cross site scripting

    A vulnerability was found in songquanpeng one-api up to 0.6.10. It has been classified as problematic. This affects an unknown part of the component System Setting Handler. The manipulation of the argument Homepage Content/About System/Footer leads to cross s…

    songquanpeng one-api github.com/songquanpeng/one-api Go