Go/github.com/QuantumNous/new-api CVE-2025-62155: high 8.5, EPSS 0.30%

new-api is vulnerable to SSRF Bypass

Action: Upgrade github.com/QuantumNous/new-api to 0.9.6 or later.

go get github.com/QuantumNous/new-api@v0.9.6

Affected

Fixed versions

Sources

• osv: GHSA-9f46-w24h-69w4
• https://github.com/QuantumNous/new-api/security/advisories/GHSA-9f46-w24h-69w4
• https://nvd.nist.gov/vuln/detail/CVE-2025-62155
• https://github.com/QuantumNous/new-api/commit/e8966c73746d35bb7f4f014ad1195a96d445cacd
• https://github.com/QuantumNous/new-api

CVE-2025-62155 · published 2025-11-24T20:05:21Z · modified 2025-12-17T00:59:03.020067Z · JSON