mudler/localai version v2.21.1 contains a Cross-Site Scripting (XSS) vulnerability in its search functionality. The vulnerability

localai <=2.20.1 is vulnerable to Cross Site Scripting (XSS). When calling the delete model API and passing inappropriate paramete

mudler/localai version 2.17.1 is vulnerable to a Timing Attack. This type of side-channel attack allows an attacker to compromise

mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model

mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backend receive

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and

A Cross-Site Request Forgery (CSRF) vulnerability exists in mudler/LocalAI versions up to and including 2.15.0, which allows attac

A command injection vulnerability exists in the mudler/localai version 2.14.0. The vulnerability arises from the application's han

A path traversal vulnerability exists in mudler/localai version 2.14.0, where an attacker can exploit the model parameter during

A command injection vulnerability exists in the TranscriptEndpoint of mudler/localai, specifically within the audioToWav funct

A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft malicious