TI-2026-70732 CVE-2026-108754 · GHSA-cg67-pj93-c6m6
Cleartext proxy key logging in GPT-Load via access logger
Priority LOW 21
GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthKey strips the key parameter.