Security Digest: November 24, 2025 - 1 Critical Vulnerability

A critical SSRF vulnerability, CVE-2025-62155, can bypass existing security fixes through a 302 redirect. Immediate patching is essential.

· 2 min read

Urgent Alert: Bypass Detected in SSRF Vulnerability Fix

Executive Summary: A critical Server-Side Request Forgery (SSRF) vulnerability, CVE-2025-62155, has been identified with the ability to bypass existing security fixes via a 302 redirect. Immediate patching and monitoring are essential to prevent unauthorized access to internal services.

Critical Vulnerabilities

CVE-2025-62155: SSRF Bypass with 302 Redirect

  • Impact: Attackers can exploit this vulnerability to access internal resources despite existing security measures.
  • Affected Systems: Applications using the package go github.com/QuantumNous/new-api.
  • Immediate Action: Update to the latest version released by QuantumNous, which addresses this bypass method.
  • Mitigation: Apply the patch immediately and confirm that redirects are adequately handled to prevent intranet exposure.

What to Do Now

  1. Update your systems with the latest patch from QuantumNous for the new-api package.
  2. Verify that your application no longer follows 302 redirects that lead to internal resources.
  3. Monitor network traffic for unexpected access attempts to internal services, particularly from external IPs.

Related Resources

Keep reading