New API: User List API Leaks Root User Access Token Leading to Privilege Escalation in github.com/QuantumNous/new-api