one-api vulnerabilities
1 known vulnerability in one-api from Songquanpeng. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.5average CVSS score
Latest first
- 8.5 High severity
one-api: Missing Authorization
one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix on the API key or through a URL path parameter. The suffix path is reached only after model.IsAdmin su