← Back to Dashboard

CVE-2026-41432

HIGH NVD
CVSS Score
7.1
Severity
HIGH
Source
NVD
Published
May 08, 2026
Description

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in the Stripe webhook handler that allows an unauthenticated attacker to forge webhook events and credit arbitrary quota to their account without making any payment. This issue has been patched in version 0.12.10.

View Full Details ← Back