EUVD-2026-96919

GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthKey strips the key parameter. Attackers with read access to console logs or ./data/logs/app.log can recover proxy keys...

CVE-2026-108754

Versions of GPT-Load through 1.4.11 are vulnerable to a cleartext logging flaw where the Gin Logger middleware records raw query strings. This occurs because the logging happens before the extractAuthKey function can strip the sensitive key parameter. An attacker with read access to console logs ...

CVE-2026-108754 GPT-Load through 1.4.11 Cleartext Proxy Key Logging via Access Logger

GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthKey strips the key parameter. Attackers with read access to console logs or ./data/logs/app.log can recover proxy keys...

MAL-2026-5595 Malicious code in 0x2ai-demo8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc8b825a6ca24f0ed99210734ea8d4f4fb7bf1bbdb3767b67417bf5cdb83257 On npm install, scripts/postinstall.cjs writes a .mcp.json into the installer's working directory that registers a stdio MCP server...

Nessus 日志信息泄露漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. Nessus suffers from a security vulnerability that stems from the fact that an authenticated attacker can leverage the same proxy and cluster node link keys, potentially allowing...