| id: GO-2025-3636 |
| modules: |
| - module: github.com/songquanpeng/one-api |
| unsupported_versions: |
| - last_affected: 0.6.10 |
| vulnerable_at: 0.6.10 |
| summary: one-api Cross-site Scripting vulnerability in github.com/songquanpeng/one-api |
| cves: |
| - CVE-2025-3801 |
| ghsas: |
| - GHSA-wvcx-j62q-45qw |
| references: |
| - advisory: https://github.com/advisories/GHSA-wvcx-j62q-45qw |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-3801 |
| - web: https://github.com/yaowenxiao721/Poc/blob/main/One-API/One-API-poc.md |
| - web: https://vuldb.com/?ctiid.305655 |
| - web: https://vuldb.com/?id.305655 |
| - web: https://vuldb.com/?submit.554702 |
| source: |
| id: GHSA-wvcx-j62q-45qw |
| created: 2025-04-22T11:21:20.399509-04:00 |
| review_status: UNREVIEWED |
