Newapi New Api — known CVE vulnerabilities

Every CVE whose affected-product data names Newapi New Api, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-55573 — CVSS 8.8 (high): QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).
• CVE-2026-25802 — CVSS 7.6 (high): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.9, a…
• CVE-2026-42339 — CVSS 7.1 (high): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and…
• CVE-2026-41432 — CVSS 7.1 (high): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a…
• CVE-2026-30886 — CVSS 6.5 (medium): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.11.4-alpha.2…
• CVE-2026-25591 — CVSS 6.5 (medium): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.10…
• CVE-2026-32879 — CVSS 4.9 (medium): New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Starting in version 0.10.0, a…