Threats affecting pkg:github/songquanpeng/one-api

A business logic vulnerability exists in the Redeem function of the Redemption Code Top-Up Endpoint in songquanpeng one-api versions up to 0.6.11-preview.7. This flaw allows remote manipulation resulting in business logic errors. Exploitation requires a high level of complexity and is considered difficult. A fix has been proposed but is not yet accepted or available. The vulnerability has a low CVSS score of 2.3.