Executive brief
new-api is vulnerable to SSRF Bypass in one-api
Affected products
- Go github.com/QuantumNous/new-api
Junglewise Threat Intelligence
CVE-2025-62155: GO-2025-4154 - new-api is vulnerable to SSRF Bypass in one-api
CVE-2025-62155 · Severity: low · CVSS 3.1 · Published 2025-12-15
Technologies: github.com/QuantumNous/new-api (Go). Vendors: Go.
Related threats
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.18, user-controll
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.11, POST /api/str
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. From 0.9.1.3 until 1.0.0-rc.7, Admi
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.16, repeated PUT
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user