https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:19:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-261886 EUVD-2026-261886 https://cve.radiocsirt.org/vuln/euvd-2026-261886 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62155 <p>New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.9.6, a recently patched SSRF vulnerability contains a bypass method that can bypass the existing security fix and still allow SSRF to occur. Because the existing fix only applies security restrictions to the first URL request, a 302 redirect can bypass existing security measures and successfully access the intranet. This issue has been patched in version 0.9.6.</p> <p>New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.9.6, a recently patched SSRF vulnerability contains a bypass method that can bypass the existing security fix and still allow SSRF to occur. Because the existing fix only applies security restrictions to the first URL request, a 302 redirect can bypass existing security measures and successfully access the intranet. This issue has been patched in version 0.9.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62155 https://cve.radiocsirt.org/vuln/ghsa-9f46-w24h-69w4 <p><strong>Affected:</strong> Go: github.com/QuantumNous/new-api</p> <p>### Summary A recently patched SSRF vulnerability contains a bypass method that can bypass the existing security fix and still allow SSRF to occur. Because the existing fix only applies security restrictions to the first URL request, a 302 redirect can bypass existing security measures and successfully access the intranet.</p> <p>### Details Use the following script to deploy on the attacker&#39;s server. Since ports 80, 443, and 8080 are default ports within the security range set by the administrator and will not be blocked, the service is deployed on port 8080. ``` from flask import Flask, redirect app = Flask(__name__) @app.route(&#39;/redirect&#39;) def ssrf_redirect(): return redirect(&#39;http://127.0.0.1:8003/uid.txt&#39;, code=302) if __name__ == &#39;__main__&#39;: app.run(host=&#39;0.0.0.0&#39;, port=8080) ``` Then, a request is made to the malicious service opened by the attacker, and it can be found that the resources on the intranet are successfully accessed. &lt;img width=&#34;663&#34; height=&#34;60&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/2f296cff-510d-4cfe-8509-518e747bf8fe&#34; /&gt; At the same time, the locally opened service 127.0.0.1:8083/uid.txt also received related requests. &lt;img width=&#34;717&#34; height=&#34;79&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/d6b6d2cc-280b-45b5-9946-10b7891bf017&#34; /&gt;</p> <p>### Impact Using 302 redirects to bypass previous SSRF security fixes</p> <p><strong>Affected:</strong> Go: github.com/QuantumNous/new-api</p> <p>### Summary A recently patched SSRF vulnerability contains a bypass method that can bypass the existing security fix and still allow SSRF to occur. Because the existing fix only applies security restrictions to the first URL request, a 302 redirect can bypass existing security measures and successfully access the intranet.</p> <p>### Details Use the following script to deploy on the attacker&#39;s server. Since ports 80, 443, and 8080 are default ports within the security range set by the administrator and will not be blocked, the service is deployed on port 8080. ``` from flask import Flask, redirect app = Flask(__name__) @app.route(&#39;/redirect&#39;) def ssrf_redirect(): return redirect(&#39;http://127.0.0.1:8003/uid.txt&#39;, code=302) if __name__ == &#39;__main__&#39;: app.run(host=&#39;0.0.0.0&#39;, port=8080) ``` Then, a request is made to the malicious service opened by the attacker, and it can be found that the resources on the intranet are successfully accessed. &lt;img width=&#34;663&#34; height=&#34;60&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/2f296cff-510d-4cfe-8509-518e747bf8fe&#34; /&gt; At the same time, the locally opened service 127.0.0.1:8083/uid.txt also received related requests. &lt;img width=&#34;717&#34; height=&#34;79&#34; alt=&#34;image&#34; src=&#34;https://github.com/user-attachments/assets/d6b6d2cc-280b-45b5-9946-10b7891bf017&#34; /&gt;</p> <p>### Impact Using 302 redirects to bypass previous SSRF security fixes</p> https://cve.radiocsirt.org/vuln/ghsa-9f46-w24h-69w4