{"action":"Upgrade github.com/QuantumNous/new-api to 0.9.6 or later.","affected":[{"fixed":"0.9.6","introduced":"0"}],"component":"github.com/QuantumNous/new-api","cve_ids":["CVE-2025-62155"],"ecosystem":"Go","epss":0.00279,"exploited":false,"fixed_versions":["0.9.6"],"ghsa_id":"GHSA-9f46-w24h-69w4","id":"tcs_01M5KF5F9C958C46DFA95QT005","modified_at":"2025-12-17T00:59:03.020067Z","published_at":"2025-11-24T20:05:21Z","references":["https://osv.dev/vulnerability/GHSA-9f46-w24h-69w4","https://github.com/QuantumNous/new-api/security/advisories/GHSA-9f46-w24h-69w4","https://nvd.nist.gov/vuln/detail/CVE-2025-62155","https://github.com/QuantumNous/new-api/commit/e8966c73746d35bb7f4f014ad1195a96d445cacd","https://github.com/QuantumNous/new-api"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-9f46-w24h-69w4","url":"https://osv.dev/vulnerability/GHSA-9f46-w24h-69w4"}],"summary":"new-api is vulnerable to SSRF Bypass"}