Go/github.com/QuantumNous/new-api CVE-2026-42339: high 7.1, EPSS 0.26%

QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0 in github.com/QuantumNous/new-api

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5652
• nvd: CVE-2026-42339
• https://github.com/QuantumNous/new-api/security/advisories/GHSA-v5c3-6wvc-pc2q
• https://github.com/advisories/GHSA-9f46-w24h-69w4

CVE-2026-42339 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:38.526284588Z · JSON