https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:29:43.733171+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-25802 CVE-2026-25802 — New API has Potential XSS in its MarkdownRenderer component 2026-10-07T03:29:43.748376+00:00

Affected: QuantumNous new-api

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.10.8-alpha.9, a potential unsafe operation occurs in component `MarkdownRenderer.jsx`, allowing for Cross-Site Scripting(XSS) when the model outputs items containing `<script>` tag. Version 0.10.8-alpha.9 fixes the issue.