Junglewise Threat Intelligence

CVE-2026-25802: GO-2026-4532 - New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

CVE-2026-25802 · Severity: low · CVSS 3.1 · Published 2026-02-25

Technologies: github.com/QuantumNous/new-api (Go). Vendors: Go.

Executive brief

New API has Potential XSS in its MarkdownRenderer component in github.com/QuantumNous/new-api

Affected products

Go github.com/QuantumNous/new-api

Related threats

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.18, user-controll
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.11, POST /api/str
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. From 0.9.1.3 until 1.0.0-rc.7, Admi
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.16, repeated PUT
New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.7, the admin user