[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-11465":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":28,"duplicate_of":9,"upstream":31,"downstream":32,"duplicates":35,"related":36,"reserved_at":9,"published_at":38,"modified_at":39,"state":40,"summary":41,"references_raw":48,"kevs":102,"epss":103,"epss_history":106,"metrics":371,"affected":397},"CVE-2026-11465","A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic errors. The attack may be launched remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"CWE-840","Business Logic Errors","Weaknesses in this category identify some of the underlying problems that commonly allow attackers to manipulate the business logic of an application. Errors in business logic can be devastating to an entire application. They can be difficult to find automatically, since they typically involve legitimate use of the application's functionality. However, many business logic errors can exhibit patterns that are similar to well-understood implementation and design weaknesses.","category","Incomplete",[],[19],{"_key":20,"name":21,"source":22,"url":23,"maturity":24,"reliability_score":25,"verified":26,"type":9,"platforms":27,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_SONGQUANPENG_ONE-API","One Api","github","https://github.com/songquanpeng/one-api/issues/2397","poc",0.3,false,[],[29,30],"GHSA-7v3v-cp44-vc8m","GO-2026-6126",[],[33],{"_key":34},"OPENSUSE-SU-2026:21761-1",[],[37],{"_key":34},"2026-06-07T22:45:09.068Z","2026-06-08T13:04:02.291Z","Deferred",{"cisa_kev":26,"cisa_ransomware":26,"cisa_vendor":9,"epss_severity":42,"epss_score":43,"severity":42,"severity_score":44,"severity_version":45,"severity_source":46,"severity_vector":47,"severity_status":40},"low",0.0022,3.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",[49,58,64,69,73,78,83,88,93,98],{"url":50,"sources":51,"tags":54},"https://vuldb.com/vuln/369085",[46,52,53],"nvd","osv_go",[55,56,57],"VDB Entry","Technical Description","WEB",{"url":59,"sources":60,"tags":61},"https://vuldb.com/vuln/369085/cti",[46,52,53],[62,63,57],"Signature","Permissions Required",{"url":65,"sources":66,"tags":67},"https://vuldb.com/cve/CVE-2026-11465",[46,52,53],[68,57],"Third Party Advisory",{"url":70,"sources":71,"tags":72},"https://vuldb.com/submit/833320",[46,52,53],[68,57],{"url":23,"sources":74,"tags":75},[46,52,53],[76,77,57],"Exploit","Issue Tracking",{"url":79,"sources":80,"tags":81},"https://github.com/songquanpeng/one-api/pull/2399",[46,52,53],[77,82,57],"Patch",{"url":84,"sources":85,"tags":86},"https://github.com/songquanpeng/one-api/",[46,52],[87],"Product",{"url":89,"sources":90,"tags":91},"https://nvd.nist.gov/vuln/detail/CVE-2026-11465",[53],[92],"Advisory",{"url":94,"sources":95,"tags":96},"https://github.com/songquanpeng/one-api",[53],[97],"PACKAGE",{"url":99,"sources":100,"tags":101},"https://github.com/advisories/GHSA-7v3v-cp44-vc8m",[53],[92],[],{"date":104,"score":43,"percentile":105},"2026-09-19",0.12757,[107,111,114,117,120,123,127,130,134,137,140,143,146,149,152,155,158,161,164,167,170,172,175,178,181,184,187,190,193,196,199,202,205,207,210,213,216,219,221,224,226,229,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,275,278,281,284,287,290,293,296,299,302,305,307,310,313,316,319,322,325,328,331,333,336,339,342,345,348,351,354,357,360,363,366,369],{"date":108,"score":109,"percentile":110},"2026-06-08",0.00032,0.09818,{"date":112,"score":109,"percentile":113},"2026-06-09",0.0985,{"date":115,"score":109,"percentile":116},"2026-06-10",0.09891,{"date":118,"score":109,"percentile":119},"2026-06-11",0.0993,{"date":121,"score":109,"percentile":122},"2026-06-12",0.09978,{"date":124,"score":125,"percentile":126},"2026-06-13",0.00036,0.11228,{"date":128,"score":125,"percentile":129},"2026-06-14",0.11194,{"date":131,"score":132,"percentile":133},"2026-06-15",0.00332,0.24745,{"date":135,"score":132,"percentile":136},"2026-06-16",0.24778,{"date":138,"score":132,"percentile":139},"2026-06-17",0.24797,{"date":141,"score":132,"percentile":142},"2026-06-18",0.24819,{"date":144,"score":132,"percentile":145},"2026-06-19",0.2481,{"date":147,"score":132,"percentile":148},"2026-06-20",0.24801,{"date":150,"score":132,"percentile":151},"2026-06-21",0.24781,{"date":153,"score":132,"percentile":154},"2026-06-22",0.24753,{"date":156,"score":43,"percentile":157},"2026-06-23",0.12251,{"date":159,"score":43,"percentile":160},"2026-06-24",0.12265,{"date":162,"score":43,"percentile":163},"2026-06-25",0.12357,{"date":165,"score":43,"percentile":166},"2026-06-26",0.12378,{"date":168,"score":43,"percentile":169},"2026-06-27",0.12412,{"date":171,"score":43,"percentile":166},"2026-06-28",{"date":173,"score":43,"percentile":174},"2026-06-29",0.12376,{"date":176,"score":43,"percentile":177},"2026-06-30",0.12375,{"date":179,"score":43,"percentile":180},"2026-07-01",0.12445,{"date":182,"score":43,"percentile":183},"2026-07-02",0.1242,{"date":185,"score":43,"percentile":186},"2026-07-03",0.12414,{"date":188,"score":43,"percentile":189},"2026-07-04",0.12421,{"date":191,"score":43,"percentile":192},"2026-07-05",0.12429,{"date":194,"score":43,"percentile":195},"2026-07-06",0.12434,{"date":197,"score":43,"percentile":198},"2026-07-07",0.12422,{"date":200,"score":43,"percentile":201},"2026-07-08",0.12404,{"date":203,"score":43,"percentile":204},"2026-07-09",0.12415,{"date":206,"score":43,"percentile":189},"2026-07-10",{"date":208,"score":43,"percentile":209},"2026-07-11",0.12425,{"date":211,"score":43,"percentile":212},"2026-07-12",0.12409,{"date":214,"score":43,"percentile":215},"2026-07-13",0.12408,{"date":217,"score":43,"percentile":218},"2026-07-14",0.12435,{"date":220,"score":43,"percentile":198},"2026-07-15",{"date":222,"score":43,"percentile":223},"2026-07-16",0.12428,{"date":225,"score":43,"percentile":195},"2026-07-17",{"date":227,"score":43,"percentile":228},"2026-07-18",0.12439,{"date":230,"score":43,"percentile":218},"2026-07-19",{"date":232,"score":43,"percentile":233},"2026-07-20",0.1254,{"date":235,"score":43,"percentile":236},"2026-07-21",0.12525,{"date":238,"score":43,"percentile":239},"2026-07-22",0.12559,{"date":241,"score":43,"percentile":242},"2026-07-23",0.12541,{"date":244,"score":43,"percentile":245},"2026-07-24",0.12542,{"date":247,"score":43,"percentile":248},"2026-07-25",0.12615,{"date":250,"score":43,"percentile":251},"2026-07-26",0.1261,{"date":253,"score":43,"percentile":254},"2026-07-27",0.12582,{"date":256,"score":43,"percentile":257},"2026-07-28",0.12624,{"date":259,"score":43,"percentile":260},"2026-07-29",0.12608,{"date":262,"score":43,"percentile":263},"2026-07-30",0.12606,{"date":265,"score":43,"percentile":266},"2026-07-31",0.12601,{"date":268,"score":43,"percentile":269},"2026-08-01",0.12592,{"date":271,"score":43,"percentile":272},"2026-08-02",0.12589,{"date":274,"score":43,"percentile":272},"2026-08-03",{"date":276,"score":43,"percentile":277},"2026-08-04",0.12555,{"date":279,"score":43,"percentile":280},"2026-08-05",0.12521,{"date":282,"score":43,"percentile":283},"2026-08-06",0.12514,{"date":285,"score":43,"percentile":286},"2026-08-07",0.12497,{"date":288,"score":43,"percentile":289},"2026-08-08",0.12495,{"date":291,"score":43,"percentile":292},"2026-08-09",0.12478,{"date":294,"score":43,"percentile":295},"2026-08-10",0.12488,{"date":297,"score":43,"percentile":298},"2026-08-11",0.12572,{"date":300,"score":43,"percentile":301},"2026-08-12",0.12599,{"date":303,"score":43,"percentile":304},"2026-08-13",0.12605,{"date":306,"score":43,"percentile":260},"2026-08-14",{"date":308,"score":43,"percentile":309},"2026-08-15",0.12763,{"date":311,"score":43,"percentile":312},"2026-08-16",0.1279,{"date":314,"score":43,"percentile":315},"2026-08-17",0.12718,{"date":317,"score":43,"percentile":318},"2026-08-18",0.12714,{"date":320,"score":43,"percentile":321},"2026-08-19",0.12756,{"date":323,"score":43,"percentile":324},"2026-08-20",0.1276,{"date":326,"score":43,"percentile":327},"2026-08-21",0.12765,{"date":329,"score":43,"percentile":330},"2026-08-22",0.12762,{"date":332,"score":43,"percentile":324},"2026-08-23",{"date":334,"score":43,"percentile":335},"2026-08-24",0.12269,{"date":337,"score":43,"percentile":338},"2026-08-25",0.12264,{"date":340,"score":43,"percentile":341},"2026-08-26",0.123,{"date":343,"score":43,"percentile":344},"2026-08-27",0.12288,{"date":346,"score":43,"percentile":347},"2026-08-28",0.12307,{"date":349,"score":43,"percentile":350},"2026-08-29",0.12312,{"date":352,"score":43,"percentile":353},"2026-08-30",0.12327,{"date":355,"score":43,"percentile":356},"2026-08-31",0.12323,{"date":358,"score":43,"percentile":359},"2026-09-01",0.12335,{"date":361,"score":43,"percentile":362},"2026-09-02",0.12341,{"date":364,"score":43,"percentile":365},"2026-09-03",0.12333,{"date":367,"score":43,"percentile":368},"2026-09-04",0.12346,{"date":370,"score":43,"percentile":166},"2026-09-05",[372,386,394],{"source":46,"cvss_v2_0":373,"cvss_v3_0":378,"cvss_v3_1":383,"cvss_v4_0":384},{"baseScore":374,"baseSeverity":9,"vectorString":375,"impactScore":376,"exploitabilityScore":377},2.1,"AV:N/AC:H/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR",2.9,3.9,{"baseScore":44,"baseSeverity":379,"vectorString":380,"impactScore":381,"exploitabilityScore":382},"LOW","CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R",2.3,4.1,{"baseScore":44,"baseSeverity":379,"vectorString":47,"impactScore":381,"exploitabilityScore":382},{"baseScore":381,"baseSeverity":379,"vectorString":385,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P",{"source":52,"cvss_v2_0":387,"cvss_v3_0":9,"cvss_v3_1":389,"cvss_v4_0":391},{"baseScore":374,"baseSeverity":9,"vectorString":388,"impactScore":376,"exploitabilityScore":377},"AV:N/AC:H/Au:S/C:N/I:P/A:N",{"baseScore":44,"baseSeverity":379,"vectorString":390,"impactScore":381,"exploitabilityScore":382},"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",{"baseScore":392,"baseSeverity":379,"vectorString":393,"impactScore":9,"exploitabilityScore":9},1.3,"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":53,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":395,"cvss_v4_0":396},{"baseScore":44,"baseSeverity":9,"vectorString":390,"impactScore":381,"exploitabilityScore":382},{"baseScore":381,"baseSeverity":9,"vectorString":385,"impactScore":9,"exploitabilityScore":9},[398,414],{"ecosystem":399,"name":400,"vendor":401,"product":402,"cpe_part":9,"purl_type":403,"purl_namespace":401,"purl_name":402,"source":9,"versions":404},"Go","github.com/songquanpeng/one-api","github.com/songquanpeng","one-api","golang",[405,412],{"version":406,"is_range":407,"range_type":408,"version_start":409,"version_start_type":410,"version_end":411,"version_end_type":410,"fixed_in":9},"gte0_1_6_alpha_lte0_6_11_preview_7",true,"semver","0.1.6-alpha","including","0.6.11-preview.7",{"version":413,"is_range":407,"range_type":408,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"ecosystem":9,"name":402,"vendor":415,"product":402,"cpe_part":416,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":417},"songquanpeng","a",[418,420,422,424,426,428,430,432],{"version":419,"is_range":26,"range_type":46,"version_start":419,"version_start_type":410,"version_end":419,"version_end_type":410,"fixed_in":9},"0.6.11-preview.0",{"version":421,"is_range":26,"range_type":46,"version_start":421,"version_start_type":410,"version_end":421,"version_end_type":410,"fixed_in":9},"0.6.11-preview.1",{"version":423,"is_range":26,"range_type":46,"version_start":423,"version_start_type":410,"version_end":423,"version_end_type":410,"fixed_in":9},"0.6.11-preview.2",{"version":425,"is_range":26,"range_type":46,"version_start":425,"version_start_type":410,"version_end":425,"version_end_type":410,"fixed_in":9},"0.6.11-preview.3",{"version":427,"is_range":26,"range_type":46,"version_start":427,"version_start_type":410,"version_end":427,"version_end_type":410,"fixed_in":9},"0.6.11-preview.4",{"version":429,"is_range":26,"range_type":46,"version_start":429,"version_start_type":410,"version_end":429,"version_end_type":410,"fixed_in":9},"0.6.11-preview.5",{"version":431,"is_range":26,"range_type":46,"version_start":431,"version_start_type":410,"version_end":431,"version_end_type":410,"fixed_in":9},"0.6.11-preview.6",{"version":411,"is_range":26,"range_type":46,"version_start":411,"version_start_type":410,"version_end":411,"version_end_type":410,"fixed_in":9}]