All products

github.com/mudler/LocalAI

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLsCVE-2026-59707 · GHSA-8C5Q-HX4G-QQ23Version ranges need review. github.com/mudler/LocalAI Go Critical Fix reported
LocalAI Cross-site Scripting vulnerabilityCVE-2024-48057 · GHSA-GHX4-CGXW-7H9PVersion ranges need review. github.com/mudler/LocalAI Go Low No fix reported
LocalAI Cross-Site Scripting (XSS) vulnerability in its search functionalityCVE-2024-9900 · GHSA-W6HH-W36C-VXMWVersion ranges need review. github.com/mudler/LocalAI Go Medium Fix reported