songquanpeng

Products

ProductCVEsExploitedLatest
one-api3–Aug 26, 2026

Exploited and recent CVEs

  • CVE-2026-81027 High 8.5 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning 0.3%
  • CVE-2026-11465 Low 3.1 songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error 0.2%
  • CVE-2025-3801 Low 2.4 songquanpeng one-api System Setting cross site scripting 0.3%