Skip to content
OpenAdvisories

Package · Go

github.com/mudler/LocalAI

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-9900

    Cross-Site Scripting (XSS) in mudler/localai

    mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. The vulnerability arises due to improper sanitization of user input, allowing the injection and execution of arbitrary JavaScript code. This can le…

    mudler mudler/localai github.com/mudler/LocalAI Go
  • Medium 6.1
    CVE-2024-48057

    LocalAI Cross-site Scripting vulnerability

    localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS). When calling the delete model API and passing inappropriate parameters, it can cause a one-time storage XSS, which will trigger the payload when a user accesses the homepage.

    github.com/mudler/LocalAI Go