VYPR

sub2api

by Wei Shaw

CVEs (1)

  • CVE-2026-27812CriFeb 26, 2026
    risk 0.59cvss 9.1epss 0.00

    Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. A vulnerability in versions prior to 0.1.85 is a Password Reset Poisoning (Host Header / Forwarded Header trust issue), which allows attackers to manipulate the…