Go/github.com/QuantumNous/new-api CVE-2026-64866: unknown, EPSS 0.47%
New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Action: Upgrade github.com/QuantumNous/new-api to 1.0.0-rc.7 or later.
go get github.com/QuantumNous/new-api@v1.0.0-rc.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-rc.7 | - |
Fixed versions
| 1.0.0-rc.7 |
Sources
- osv: GO-2026-6244
- https://github.com/QuantumNous/new-api/security/advisories/GHSA-p845-629j-rcj6
- https://github.com/QuantumNous/new-api/commit/0936e2504655a5cbf7bc3c388f6d3e2bb24916d3
- https://github.com/QuantumNous/new-api/pull/4929
- https://github.com/QuantumNous/new-api/releases/tag/v1.0.0-rc.7
CVE-2026-64866 · published · modified · JSON