Newapi New_api
9 CVEs affecting Newapi New_api. Latest disclosed: 2026-07-09. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-55573 | High | 8.8 | 2025-08-22 | QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS). |
CVE-2026-33655 | High | 7.7 | 2026-07-09 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection c… |
CVE-2026-25802 | High | 7.6 | 2026-02-24 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.9, a potential unsafe op… |
CVE-2026-42339 | High | 7.1 | 2026-05-08 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protect… |
CVE-2026-41432 | High | 7.1 | 2026-05-08 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in th… |
CVE-2026-30886 | Medium | 6.5 | 2026-03-23 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.11.4-alpha.2, an Insecure Direct Ob… |
CVE-2026-25591 | Medium | 6.5 | 2026-02-24 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard… |
CVE-2026-44342 | Medium | 5.3 | 2026-07-09 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 0.12.0-alpha.1, the email and WeChat account… |
CVE-2026-32879 | Medium | 4.9 | 2026-03-23 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Starting in version 0.10.0, a logic flaw in the univer… |