Songquanpeng vulnerabilities
We track 1 vulnerability in Songquanpeng products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
1vulnerabilities
0critical
1high
0exploited
8.5average CVSS score
Latest Songquanpeng vulnerabilities
- 8.5 High severity
one-api: Missing Authorization
one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin su