CVE-2026-30886
2 advisories.
Go/github.com/QuantumNous/new-api CVE-2026-30886: medium 6.5, EPSS 0.38%
New API: IDOR in VideoProxy allows cross-user video content access via missing ownership check
Action: Upgrade github.com/QuantumNous/new-api to 0.11.4-alpha.2 or later.
go get github.com/QuantumNous/new-api@v0.11.4-alpha.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.4-alpha.2 | - |
Fixed versions
| 0.11.4-alpha.2 |
Sources
- osv: GHSA-f35r-v9x5-r8mc
- https://github.com/QuantumNous/new-api/security/advisories/GHSA-f35r-v9x5-r8mc
- https://nvd.nist.gov/vuln/detail/CVE-2026-30886
- https://github.com/QuantumNous/new-api/commit/50ec2bac6b341e651fc9ac4344e3bd2cdaeafdbd
- https://github.com/QuantumNous/new-api
CVE-2026-30886 · published · modified · JSON
Go/github.com/QuantumNous/new-api CVE-2026-30886: unknown, EPSS 0.38%
New API: IDOR in VideoProxy allows cross-user video content access via missing ownership check in github.com/QuantumNous/new-api
Action: Upgrade github.com/QuantumNous/new-api to 0.11.4-alpha.2 or later.
go get github.com/QuantumNous/new-api@v0.11.4-alpha.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.4-alpha.2 | - |
Fixed versions
| 0.11.4-alpha.2 |
Sources
- osv: GO-2026-4814
- https://github.com/QuantumNous/new-api/security/advisories/GHSA-f35r-v9x5-r8mc
- https://nvd.nist.gov/vuln/detail/CVE-2026-30886
- https://github.com/QuantumNous/new-api/commit/50ec2bac6b341e651fc9ac4344e3bd2cdaeafdbd
CVE-2026-30886 · published · modified · JSON