Vulnerability GO-2024-3253
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
November 06, 2024 at 05:21 PM UTC
LocalAI Cross-site Scripting vulnerability in github.com/mudler/LocalAI
v0.8.1 - v1.40.0
v0.8.1 - v1.40.0
Summary
LocalAI Cross-site Scripting vulnerability in github.com/mudler/LocalAI
Details
LocalAI Cross-site Scripting vulnerability in github.com/mudler/LocalAI
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 months ago
LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs
v0.8.1 - v1.40.0 GHSA-8c5q-hx4g-qq23
v0.8.1 - v1.40.0 GHSA-8c5q-hx4g-qq23
Unknown
1 year ago
LocalAI Cross-Site Scripting (XSS) vulnerability in its search functionality in github.com/mudler/LocalAI
v0.8.1 - v1.40.0 GO-2025-3542
v0.8.1 - v1.40.0 GO-2025-3542
Medium Risk
1 year ago
LocalAI Cross-Site Scripting (XSS) vulnerability in its search functionality
v0.8.1 - v1.40.0 GHSA-w6hh-w36c-vxmw
v0.8.1 - v1.40.0 GHSA-w6hh-w36c-vxmw
Medium Risk
1 year ago
LocalAI Cross-site Scripting vulnerability
v0.8.1 - v1.40.0 GHSA-ghx4-cgxw-7h9p
v0.8.1 - v1.40.0 GHSA-ghx4-cgxw-7h9p
Impacted packages
Timeline
Published
1 year ago
November 06, 2024 at 05:21 PM UTC
Last Modified
7 months ago
March 03, 2026 at 04:56 AM UTC