Executive brief
New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
Affected products
- Go github.com/QuantumNous/new-api
Junglewise Threat Intelligence
CVE-2026-25591: GO-2026-4531 - New API has an SQL LIKE Wildcard Injection DoS via Token Search in github.com/QuantumNous/new-api
CVE-2026-25591 · Severity: medium · CVSS 4 · Published 2026-02-25
Technologies: github.com/QuantumNous/new-api (Go). Vendors: Go.
Related threats
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.18, user-controll
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.11, POST /api/str
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. From 0.9.1.3 until 1.0.0-rc.7, Admi
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.16, repeated PUT
- New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user