New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 8, 2026 · NIST NVD

   Detected

   New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in the Stripe webhook handler that allows an unauthenticated attacker to forge webhook events and credit arbitrary quota to their account without making any payment. This issue has been patched in version 0.12.10.

2. Jun 17, 2026 · NIST NVD

   Updated

   New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in the Stripe webhook handler that allows an unauthenticated attacker to forge webhook events and credit arbitrary quota to their account without making any payment. This issue has been patched in version 0.12.10.

Affected

• cpe newapi/new apiversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-41432

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-41432

  New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in the Stripe webhook handler that allows an unauthenticated attacker to forge webhook events and credit arbitrary quota to th

  nvd.nist.gov

References

• Product · github.com
• Exploit · github.com