Skip to content
Threat Feed
Subscribe

Product

New-Api

2 briefs RSS
critical threat

Integer Overflow in New-API Billing Settlement

A critical integer overflow vulnerability in QuantumNous new-api allows authenticated users to inflate their account balance by injecting extreme quantity multipliers that result in negative settlement charges.

exploited new-api +1 QuantumNous privilege-escalation information-disclosure cve-2026-64859 denial-of-service web-application cve-2026-64868
1r 3t 1c
high advisory

Shai-Hulud Campaign Activity

Tracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.

jscrambler 8.14.0 +102 campaign shai-hulud
20i updated