Vulnerabilities

TI-2026-32309 CVE-2026-44342 · GHSA-26v7-h57m-gh9m

New API CSRF in email and WeChat account binding endpoints

LOW 23

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00191 Published 2026-07-09 Fixed in 0.12.0-alpha.1 CWE-352

TI-2026-26035 CVE-2026-33655 · GHSA-6qcr-qxgr-m7fv

LOW 34

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00442 Published 2026-07-09 Fixed in 0.12.0-alpha.1 CWE-918

TI-2026-30643 CVE-2026-42339 · GHSA-v5c3-6wvc-pc2q

HIGH 70

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00258 Published 2026-05-08 No fix listed CWE-918

TI-2026-30031 CVE-2026-41432 · GHSA-xff3-5c9p-2mr4

HIGH 69

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0085 Published 2026-05-08 Fixed in 0.12.10 CWE-1188

TI-2026-25338 CVE-2026-32879 · GHSA-5353-f8fq-65vc

LOW 22

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00295 Published 2026-03-23 No fix listed CWE-287

TI-2026-23715 CVE-2026-30886 · GHSA-f35r-v9x5-r8mc

MEDIUM 62

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00279 Published 2026-03-23 Fixed in 0.11.4-alpha.2 CWE-639

TI-2026-20865 CVE-2026-25802 · GHSA-299v-8pq9-5gjq

HIGH 66

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00256 Published 2026-02-24 Fixed in 0.10.8-alpha.9 CWE-79

TI-2026-20698 CVE-2026-25591 · GHSA-w6x6-9fp7-fqm4

MEDIUM 64

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00567 Published 2026-02-24 Fixed in 0.10.8-alpha.10 CWE-943

TI-2025-35042 CVE-2025-55573 · GHSA-8mvm-xhp4-8qjp

HIGH 73

QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00421 Published 2025-08-22 No fix listed CWE-79