1 matches found
CVE-2026-25591: Improper Neutralization of Special Elements in Data Query Logic
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to version 0.10.8-alpha.10, a SQL LIKE wildcard injection vulnerability in the /api/token/search endpoint allows authenticated users to cause denial of service through resource exhaustion by...
7.1CVSS5.9AI score0.00644EPSS
SaveExploits1References1
20