VDB

GO-2026-4814

GO-2026-4814 PUBLISHED

New API: IDOR in VideoProxy allows cross-user video content access via missing ownership check in github.com/QuantumNous/new-api

Affected Products

VendorProductVersions
github.comQuantumNous/new-api0, 0

Timeline

  • Mar 26, 2026 CVE Published
  • Mar 26, 2026 CVE Updated
  • May 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›