Quantumnous New-api

10 CVEs affecting Quantumnous New-api. Latest disclosed: 2026-05-23. Critical: 0, High: 5.

Top CVEs affecting Quantumnous New-api
CVESeverityScorePublishedSummary
CVE-2025-62155High8.52025-11-24New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.9.6, a recently patched SSRF vulner…
CVE-2025-59146High8.52025-10-09New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. An authenticated Server-Side Request Forgery (SSRF) vu…
CVE-2026-25802High7.62026-02-24New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.9, a potential unsafe op…
CVE-2026-42339High7.12026-05-08New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protect…
CVE-2026-41432High7.12026-05-08New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in th…
CVE-2026-30886Medium6.52026-03-23New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.11.4-alpha.2, an Insecure Direct Ob…
CVE-2026-9305Medium6.32026-05-23A weakness has been identified in QuantumNous new-api up to 0.12.1. The impacted element is the function SearchUserTopUps/SearchAllTopUps of the file model/top…
CVE-2026-32879Medium4.92026-03-23New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Starting in version 0.10.0, a logic flaw in the univer…
CVE-2026-9306Low3.72026-05-23A security vulnerability has been detected in QuantumNous new-api up to 0.12.1. This affects the function RelayMidjourneyImage/GetByOnlyMJId of the file router…
CVE-2026-255912026-02-24New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard…