Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.1%	CVE-2026-108858LoRAX · Insertion of Sensitive Information into Log File Medium6.8EPSS 0.1%2026-10-11CVE Database V5CVE-2026-108858 Predibase LoRAX versions up to 0.12.1 have a vulnerability where the api_token from POST /generate requests is logged in router logs. This exposes sensitive tokens to anyone with access to these logs or OTLP trace backends. The vulnerability has a medium severity with a CVSS score of 6.8. EPSS 0.1%Vulnerability Predibase #ghsa-mqw3-26gg-6g3w	CVE Database V5	2026-10-11

Showing 1–1 of 1 result