https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 15:48:19 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-108858 <p>Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users&#39; private-adapter tokens recorded through the instrumented GenerateParameters span field.</p> <p>Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users&#39; private-adapter tokens recorded through the instrumented GenerateParameters span field.</p> https://db.gcve.eu/vuln/fkie_cve-2026-108858 https://db.gcve.eu/vuln/ghsa-mqw3-26gg-6g3w <p>Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users&#39; private-adapter tokens recorded through the instrumented GenerateParameters span field.</p> <p>Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users&#39; private-adapter tokens recorded through the instrumented GenerateParameters span field.</p> https://db.gcve.eu/vuln/ghsa-mqw3-26gg-6g3w