Advisories · Technology
QuantumNous new-api.
Every CVE that names QuantumNous new-api among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
QuantumNous new-api Revoked API Token token session expiration
- QuantumNous new-api
- Authentication bypass
- CVSS 6.3 Medium
QuantumNous new-api Midjourney Image Relay Endpoint relay-router.go GetByOnlyMJId authorization
- QuantumNous new-api
- Broken access control
- CVSS 5.3 Medium
QuantumNous new-api self Endpoint topup.go SearchAllTopUps sql injection
- QuantumNous new-api
- Other injection
- SQL injection
- CVSS 8.5 High
New API has Authenticated Server-Side Request Forgery (SSRF) issue
- QuantumNous new-api
- Server-side request forgery (SSRF)