Go/github.com/songquanpeng/one-api CVE-2025-3801: low 2.4, EPSS 0.34%
one-api Cross-site Scripting vulnerability in github.com/songquanpeng/one-api
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-3636
- nvd: CVE-2025-3801
- https://github.com/advisories/GHSA-wvcx-j62q-45qw
- https://github.com/yaowenxiao721/Poc/blob/main/One-API/One-API-poc.md
- https://vuldb.com/?ctiid.305655
- https://vuldb.com/?id.305655
- https://vuldb.com/?submit.554702
CVE-2025-3801 · published · modified · JSON