songquanpeng one-api

• CVE-2026-81027 High 8.5 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning 0.3%
• CVE-2026-11465 Low 3.1 songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error 0.2%
• CVE-2025-3801 Low 2.4 songquanpeng one-api System Setting cross site scripting 0.3%