CVE-2026-64866
2 advisories.
Go/github.com/QuantumNous/new-api CVE-2026-64866: medium
New API: Admin can reset passkeys for same-level or higher-privileged users
Action: Upgrade github.com/QuantumNous/new-api to 1.0.0-rc.7 or later.
go get github.com/QuantumNous/new-api@v1.0.0-rc.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.9.1.3 | 1.0.0-rc.7 | - |
Fixed versions
| 1.0.0-rc.7 |
Sources
- osv: GHSA-p845-629j-rcj6
- https://github.com/QuantumNous/new-api/security/advisories/GHSA-p845-629j-rcj6
- https://github.com/QuantumNous/new-api/pull/4929
- https://github.com/QuantumNous/new-api/commit/0936e2504655a5cbf7bc3c388f6d3e2bb24916d3
- https://github.com/QuantumNous/new-api
- https://github.com/QuantumNous/new-api/releases/tag/v1.0.0-rc.7
CVE-2026-64866 · published · modified · JSON
Go/github.com/QuantumNous/new-api CVE-2026-64866: unknown
New API: Admin can reset passkeys for same-level or higher-privileged users in github.com/QuantumNous/new-api
Action: Upgrade github.com/QuantumNous/new-api to 1.0.0-rc.7 or later.
go get github.com/QuantumNous/new-api@v1.0.0-rc.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-rc.7 | - |
Fixed versions
| 1.0.0-rc.7 |
Sources
- osv: GO-2026-6244
- https://github.com/QuantumNous/new-api/security/advisories/GHSA-p845-629j-rcj6
- https://github.com/QuantumNous/new-api/commit/0936e2504655a5cbf7bc3c388f6d3e2bb24916d3
- https://github.com/QuantumNous/new-api/pull/4929
- https://github.com/QuantumNous/new-api/releases/tag/v1.0.0-rc.7
CVE-2026-64866 · published · modified · JSON