—

GO-2025-3636

one-api Cross-site Scripting vulnerability in github.com/songquanpeng/one-api

Details

one-api Cross-site Scripting vulnerability in github.com/songquanpeng/one-api

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/songquanpeng/one-api

Introduced in: 0

No fixed version published yet for github.com/songquanpeng/one-api (go modules). Pin to a known-safe version or switch to an alternative.

References

https://github.com/advisories/GHSA-wvcx-j62q-45qw[ADVISORY]
https://nvd.nist.gov/vuln/detail/CVE-2025-3801[ADVISORY]
https://github.com/yaowenxiao721/Poc/blob/main/One-API/One-API-poc.md[WEB]
https://vuldb.com/?ctiid.305655[WEB]
https://vuldb.com/?id.305655[WEB]
https://vuldb.com/?submit.554702[WEB]