CVE-2026-108754

Versions of GPT-Load through 1.4.11 are vulnerable to a cleartext logging flaw where the Gin Logger middleware records raw query strings. This occurs because the logging happens before the extractAuthKey function can strip the sensitive key parameter. An attacker with read access to console logs ...

EUVD-2026-96919

GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthKey strips the key parameter. Attackers with read access to console logs or ./data/logs/app.log can recover proxy keys...

Linux Distros Unpatched Vulnerability : CVE-2020-36567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unsanitized input in the default logger in github.com/gin-gonic/gin before v1.6.0 allows remote attackers to inject arbitrary log lines. CVE-2020-36567 Note tha...