Skip to content
OpenAdvisories

Package · Go

github.com/go-skynet/LocalAI

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-2029

    Command Injection in mudler/localai

    A command injection vulnerability exists in the `TranscriptEndpoint` of mudler/localai, specifically within the `audioToWav` function used for converting audio files to WAV format for transcription. The vulnerability arises due to the lack of sanitization of …

    mudler mudler/localai github.com/go-skynet/LocalAI Go