github.com/QuantumNous/new-api (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/QuantumNous/new-api, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2025-62155 — CVSS 8.5 (high): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.9.6, a recently…
• CVE-2026-25802 — CVSS 7.6 (high): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.9, a…
• CVE-2026-42339 — CVSS 7.1 (high): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and…
• CVE-2026-41432 — CVSS 7.1 (high): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a…
• CVE-2026-30886 — CVSS 6.5 (medium): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.11.4-alpha.2…
• CVE-2026-25591 — CVSS 6.5 (medium): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.10…
• CVE-2026-32879 — CVSS 4.9 (medium): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Starting in version 0.10.0, a…