CVE-2026-64859
2 advisories.
Go/github.com/QuantumNous/new-api CVE-2026-64859: critical 9.1, EPSS 0.63%
New API: User List API Leaks Root User Access Token Leading to Privilege Escalation
Action: Upgrade github.com/QuantumNous/new-api to 1.0.0-rc.7 or later.
go get github.com/QuantumNous/new-api@v1.0.0-rc.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-rc.7 | - |
Fixed versions
| 1.0.0-rc.7 |
Sources
- osv: GHSA-6x2c-phff-wx57
- https://github.com/QuantumNous/new-api/security/advisories/GHSA-6x2c-phff-wx57
- https://github.com/QuantumNous/new-api/pull/4929
- https://github.com/QuantumNous/new-api/commit/0936e2504655a5cbf7bc3c388f6d3e2bb24916d3
- https://github.com/QuantumNous/new-api
- https://github.com/QuantumNous/new-api/releases/tag/v1.0.0-rc.7
CVE-2026-64859 · published · modified · JSON
Go/github.com/QuantumNous/new-api CVE-2026-64859: unknown, EPSS 0.63%
New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api
Action: Upgrade github.com/QuantumNous/new-api to 1.0.0-rc.7 or later.
go get github.com/QuantumNous/new-api@v1.0.0-rc.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-rc.7 | - |
Fixed versions
| 1.0.0-rc.7 |
Sources
- osv: GO-2026-6240
- https://github.com/QuantumNous/new-api/security/advisories/GHSA-6x2c-phff-wx57
- https://github.com/QuantumNous/new-api/commit/0936e2504655a5cbf7bc3c388f6d3e2bb24916d3
- https://github.com/QuantumNous/new-api/pull/4929
- https://github.com/QuantumNous/new-api/releases/tag/v1.0.0-rc.7
CVE-2026-64859 · published · modified · JSON