New API CSRF in email and WeChat account binding endpoints

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-44342 · Microsoft / collected KEV context

EUVD-2026-42750

GHSA-26v7-h57m-gh9m

GO-2026-5929

cve-program · CVE-2026-44342

• https://github.com/QuantumNous/new-api/security/advisories/GHSA-26v7-h57m-gh9m
• https://github.com/QuantumNous/new-api/commit/e099117c61391abdf888fb75e382a582e550bd0e
• https://github.com/QuantumNous/new-api/releases/tag/v0.12.0-alpha.1

euvd · EUVD-2026-42750

• https://github.com/QuantumNous/new-api/security/advisories/GHSA-26v7-h57m-gh9m
• https://github.com/QuantumNous/new-api/commit/e099117c61391abdf888fb75e382a582e550bd0e
• https://github.com/QuantumNous/new-api/releases/tag/v0.12.0-alpha.1

nvd · CVE-2026-44342

• https://github.com/QuantumNous/new-api/commit/e099117c61391abdf888fb75e382a582e550bd0e
• https://github.com/QuantumNous/new-api/releases/tag/v0.12.0-alpha.1
• https://github.com/QuantumNous/new-api/security/advisories/GHSA-26v7-h57m-gh9m

osv · GHSA-26v7-h57m-gh9m

• https://github.com/QuantumNous/new-api/security/advisories/GHSA-26v7-h57m-gh9m
• https://github.com/QuantumNous/new-api/commit/e099117c61391abdf888fb75e382a582e550bd0e
• https://github.com/QuantumNous/new-api

osv · GO-2026-5929

• https://github.com/QuantumNous/new-api/security/advisories/GHSA-26v7-h57m-gh9m
• https://github.com/QuantumNous/new-api/commit/e099117c61391abdf888fb75e382a582e550bd0e

No related operational record is retained in the current change model.