Wei-Shaw vulnerabilities
We track 2 vulnerabilities in Wei-Shaw products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest Wei-Shaw vulnerabilities
- 8.5 High severity
sub2api: Improper Limitation of a Pathname to a Restricted Directory
Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants are exchanged for upstream requests made with shared provider accounts (ChatGPT/Code
- 9.1 Critical severity
sub2api: Improper Encoding or Escaping of Output
Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. A vulnerability in versions prior to 0.1.85 is a Password Reset Poisoning (Host Header / Forwarded Header trust issue), which allows attackers to