What’s Vulnerable › Products

songquanpeng one-api vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your songquanpeng one-api version is affected

Latest songquanpeng one-api vulnerabilities

• CVE-2026-81027 — one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning (CVSS 8.5)
• CVE-2026-11465 — songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error (CVSS 3.1)
• CVE-2025-3801 — songquanpeng one-api System Setting cross site scripting (CVSS 2.4)